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(57) Abstract; Tise- pss-sesni. jwe«f k»s zeisscs (« s sy>ftem and al^lted lot iSKsvidifig ;i license ma«ag«njent systeaj wt^iai^sttiram 
utiii»j t;«)Sj>«;ers to coi-sfiec; a jismsc s\m&\g,iimeni &ymm, viar a comwasxfcMtfJB tn«di»m. C«sto*aes; ksarflci wi$tt.t!te iicm&a 
fBsiagwrssist systatss vIb a«)fnj«««ka&s« ntediam t« obtalii co^siiJs o'iA'aoots* pisirss or comscv. (« jjifeJiiion, the cusioaters interact 
vGlh ifiJf;f!» iaanagsrssent systowi Via is cnv:;;::;v: iaediiiia ■<> o(<S;ii« ficsssscs for iK-cesiing the cayiimt . The Itemise iw&n- 

agmwt «ysi«m can be used with varying type;; >if «?»ient ami &kw$ if»e t!«!»r!if she oooteni t(.> have i'uH .of access io-Jhe 
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system tm msthqb fm wmmmm iiECTRWie yciisis 

BjMfaywmd sf the frwantlan 

f tela of the Invention 

The present system ami mathsd relates to igltal fights rseaaaement 
§ Dgserisiion of the RsjaMIi^&lSlY 

The arnvvth of tha Internet has created an increase in the oamhsr af engine eensamers as wsli as an-iine 
companies that pfevldo pads aod saraces m tan internet Acsardmsjy, eorisnmsrs hm began is rely mar-a hsavlly 
«rH»? the steatite traasfer of info?msdoa asd expect te access infamiatiae ffistaatsfleeusly. White sacfi essss of 
access is of great benefit to the smsm®?, being able to central eensamer access is often s difReuS fast 
IS One approach is eentreisg eensanw access woises ths use of digital fights nmaprnant {DBM)< BBSS 

attempts to attach elpitel rights ts Iftforrnatiee thsrs^v eentroilinn, tssar seeaaa see 1 affsriog the owner ni the 
Mmmtim ariepata control. Far example, 88$ nssy alow the ewnsr of the toforjnatien to obtain royalty psymsrris, 
track usnrje of the infarsmtlea issue Iscemas, and so forth. 

One con'smce preMsrn is that cenvsatieaai sppreashes fsii ts adequately centroi eaasarfser sscsss to 
1 fj infarmation. Cossomars may tinrl ways ts get SMfri the swig's contra!, far example, ma mmt rosy send the 
cofssosser a passsarrj to aec-sss- the inforjmtim Once the consumer accesses- ths trrforrnstioa the consumer may 
make conies of ths irjfarmatjsit asd pass it alsrsg ts others. 

- Asathat cemmss' preihiem Is. that conventional sppreaehes tail to prwida a digital rights management system 
that wsrks tor vsriaas types- of Irdarmatiom For axarpia. am digital fights srwgsswt system my w& for vmk 
28 fiies, b«t nsay sot he appropriate far literary mtks* 

$m&im cf ths hwsetiea 
The present invention providas a system ana* associated methods far granting access, to a o 5 ats object. 
The pressaf irwerstlcso retetes to o system m$ met hsd for proytdieg a leeass u^nogetnest system whareisi 
ssistsmars utfe cwf utars ts ammt to a Icaasa mansgatwit sptsm via a communication (nedte, Castonm 
Z$ ietcract «ftt!t the. IMtm mm®me& system m a cnmmneisstiefs madto to shtsm' sopies of yarisas pisess of 
eonteat wi?gf8in a cornent ceii eoatoiniag ti?a rspsstsd piece or wrtmx is created aswi soot ts ths easterner, h? 
additfart, ths easterners iatamst with ths license management system m a commnrskstisn mcdioni to ohtaio a iicoose 
for accessing ttsa content whsrein a iicssise ceii eentai^ the renessted jfcssnsa is create?! and sgat to tha easterner.. 
Oaee ths suatemer has l»th f ha cootcot cell anrf a related learsss ssii, -\te customer is aiiewsd to access ths piece of 
38 mimt as presWibed fey the terms of tha content ceil and the [icanse csii. 

One adventap af tha system and fnathad is that the license maasgesfient system presides complete eootroi 
ever a easterner's access to ififsraBtiee, The iicenss nianspmant systettt can embed ths iicsasc rigrits fisat m 
sssneiatcd with the cestemer and the access privlagcs that ere related to the content within tha cantant milm 
license. Tim, eestoe-sfs recava access fa pieces of coirteat after the leeose rstieireaieots have heee satisfied- 



Fefttermare, feaase fights sefinsi the mm to regulate various types ef access to a alsee of eeatent far example a 
easterner may be aala to wessr a piece af earnest, but may be restricted from printing a copy' sftte pta of eoatont 

Another advantage e( the system and mathed Is that the a'eensa maaageniaot system wwk% fe? a variety af 
different types ef fefownatian, Acentertt cell may as created far a wide-wety sf ceniertt and a iiewe Is created that 
§ corresponds to tha eastern call thus aiiewiarj tenses to he emstad far arsy content eel. Far example, a eostemsr 
may obtain access to mkm types sf center?! sash as sousd fifes, videa (lies, exepataafe fifes, text fifes, and so forth, 

Ae atldtrJenal benefit of this embodiment fa that customers cars raeehfe a piece ef assent- and access tha 
costaat without n^ach delay because the- lieeasa ssanagament system is available far immediate access yis the 
esmmymeaticm rrssdiam. The liccnsa management' system easeres that the asar receives timaf? respanm ts its 
13 requests- 

far pwpases ef siarsnarizsjo. the inwtren, certain aspects, aaVsrstsgas, and tsm\ features ef the iaseatlen 
m described herein. It is to be mxfersteed that net necessarily ail sash advantages may be achieved in accordance 
with any particular ambsdiasest sf the inwtien. Thus, for example, these' skilled is the art wl recognise that the 
invention may he embodied er carded est te a manner that schtevas arse advantage ar group of advantages as taught. 
1 5 herein w\tkmt neeassariiy aersavias, athsr advantages as may be taught or saejested herein. ; 

Brief Bescrietian at the Pratsdhas 
Figure 'I illustrates s high ievai -block diagram ef ens emsedimaftt of tha present kwantieu and itatretss tfje 
interaction betvsaen tte -tease nraaagarfieat system and tbs user eornpstar, 

Ffpre 2 literates a high level Meek iagram of ene enrollment of the present invaaticn showing tha flow 
28 ef in! orrmtiarj among the content manager, the effar manager, and the mx eemsntar. 

Figure 3 Illustrates a Mock diagram of eae afoboaloieot at tbs user competer of Rpre 2, 
Fipm 4 Iiistrstas a black dlapao? sf am arfedtoat af the eeeteat ifiasager sf Figure ■% 
fiprg! S iltostratss a block diagram ef one emisodiirjaat at the affer msaagsr af Ftpta 2. 
F ipro 8s illostratas a hlock $as$m of ace smbaalffieot of a content ceil 
2S Fipra 8h lllastrstes s hiesk im&rm af aasthar aaibodimaat af a coateot coll, 

figure 7a ilfasirates a hlosk diaaraai af ««e ambadlmeiit ef a Jfsease caii. 
Floors 7b tetraiss a bledt dJsgram af anethar ombadimeat ef a ikaase ceil, 
fipro 8 iterates a f iawchart af cne emaodaeaat af previdiag a user mth sseess ta caaterit, 
Fipm 9 illustrates s flawchart of w& erseedassat si saadioi eostest 
38 Flgorg 10 iterates a Ua«tehart of one eraboifeaat sf reauestlng' a liosnse. 

Rprs i f 'iastratm a ftaweiwt of oaa smheolffisat af saadiag & feasa, 
Rgare 12 fatratss a fiowebart af aae 'sstibodimsnt of cheskfag for costertt sari a license. 
Figure 13 illustrates a fiowebart af one aaibadimeot si creating a content soli, 
Floors 14 illustrates s flowchart af oae ambadimaot af araatiag a license salt. 
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Thess ssd other featstes -vM new be dssofieaa with referenda to the drawings. These dfasflngs end the 
associated description m provided to illustrate 'embodiments ef too iwMiw, and net to felt the scope of the 
S mveniien, 

Thfoagftout the drawings, reference numbers are re-ased ts. sadssats sarfespaofece between referenced 
sfements. In addition, ths first digit of each reference nomher indicates the 'figure in which ths element first appears. 
This application Incorporated by reference ILS, Patent Sle. §J4S,2S1 to Season, et af. 
Ths present invention relates ts s system sail matted far prmddina a ficeose marsagemant system 120. 

18 Fiprs 1 ifetretes one embodiment in whiah customers 110 trtlse aser eemaotsrs 1115 to connect to 3 license, 
management system 1 20 via s oemrnonleation medium 1 30. In ths exempfefY system the Iceasa management system 
ISO camprises two primary centpenanis, m offer manager 122 and a centers! manager 324. easterners 110 interact 
with the content marker 124 .vis the eonwoteatioji mimn 130 to ofctain copses of various pieces of eentsnt 
Pieces of content may inclade satmd fifes, video files, text documents, e-mail, aatahsse records, HyperText tofeip 

IS language (Hliii fifes, &etsrisiie Markup language (X^U fifes, Electronic Data irftarchange (EDI) figs, Messaga 
Oriented ^iddletsrsre POM) files, sxeaitabie scripts, arid aa forth, k %Mi\w< customers 1 10 Interact with the offer 
manager 122 via the eemmeosaatiaa medium 130 to ostein licenses for accessing the pieces of contest. 
I Overview 

An owlsw of one emBOdunent of a license management system 120 is shown in Figure 2. Is the exemplary 

19 system, s user computer 11S communicates with the offer manager 122 and ths aantarit manager 124, via s 
communication medium 130. k tha embodiment depicted in Figure 2, the slier manager 122 end ths content manager 
124 of ths license matMSgeiwit SYS'tent 120 m iraolgrrtenteil n separata eemaanents- connected to a eeeimunfeatian 
mdkm 130. It Is reccp&ed that in ether embodiments, the offer manager 122 and the cedent manager 124 rosy be 
part of s singla system sash tNst they may So directly connected, 

2S figore 2 also illustrates flaw of information whan a easterner 110 (Flpra 1} wants to aesasa a class of 

content, With reference to event A, ths aw compter 1 1 5 reajsests s piece ef content and the request is sent ta ths 
content manager 124, In event 8, ths content manager 124 sends a content cell 210 containing the requested content 
to ths eser computer 118- fclext, In mat C, iha oser cotnpter IIS rsgoests a loense sod the reatiest Is sent to the 
offer ntansger 1 22, In svant O, the offer rnan^er 1 22 sends a feme cell 220 oootasoifia the requested license to ths 

38 user computer 1 1S. In events I and F, tiso user sompmer 115 verifies that it has eath the content ®& 210 ansf a 
eorsasBeosling license sell 228, and the user computer 1 1S allows accsss to the contest. 

One benefit ef tl«s emaodlmear is that the aser fisnpiter 1 18 asd receive -a eieee of content and access the 
content whhaut much daisy because" ths license management system 1 20 is evsileate for immediate access vie the- 



3 



eommrmieatien medium 130, The Item® msnsprnem system 120 ensures that ths user receives timely resumes to 
its repasts. 

Another benefit of this ambodtarft is that the toss maaapmeat system 120 etmtrols the usw compter's 
J1S usa of the content m the fassa. The !fe«s maaassraerit system 120 cars erafced ths §earss« rights that see 
§ associated with the user computer 1 1 S arnl Ik- sccass prhn'iegas that are rsiafgd to the mntmt within the contest call 
210 ars#er within the Wmm eeii 228, 
II, tojtegiggtef of .a| s ^Isssse ^asagerserif. System 

Thfe seetinn provldss farther descriptors ef o«8 embodtesat of a system for preyidmg eieetranic licenses as 
shown fn figure 2. The exerrfiary system inefedss a «m»rjttRfcatieo maalum 130, a use? eanpfiar 118, and s Seems 
1 d mauagejriSat system 1 20. 

L CosTsmomesOoa M®$m 

Focusing new en the eamrainfesto tnedta 130 ss shewn is? Fipm 2, too presently prefefrsd caamwatisB 
nwiam 130 imkiss tha internet which is a global network of computers. The stmrrtare ef the interest. Whs* is 
imewrs to these- a! ardmary .ski in ths art mdudes a network baekaose with rsgtworfe hranehiag from the hsekfeoae. 

1S Ttas brasctes, in turn, have netssisrks srarsehissg from them, arsl so on. Renters rcosra informatisn packets bslsw 
Mmsk levels, ami then from na&vark te aetworic, asstltha jacket reaches the ngrsahharheod sf its destination, Frem the 
dasft'nstior?, ihs desta&m rMswk's h&st directs the mferrotfea packet ta the appropriate tar-sital, or osde. For a mare 
detailed description ef ths structure and speratiea of the tenet, please refer te "The Interact C«ma Sets Reference," by 
Harfsy Hahn ana' Ride Stent published by MeSraw-til \m. 

28 te one adyaatapoes smhedlmorh, the Internet touting hufes comprise domain name system (DNS) servers, as is 

m& kwm k the srl Of>JS Is a .Transfer Control Pfotoajfifnternat protocol fFtP/iPj servlea that is sailed open ts translate 
demam cames ts and from internet Prstsesi IIP) assesses. Ths roaiiarj hubs connect ts ens ar mars ether reirtifi huhs 
via isisih sped qwrars^eatfen snks, 

Ofss ef <K?tety skii! i« ths art, however, s«ii resapi^.th^ s %Mtt rarp ef intsraetiye cenwwisarleH pe&us 

25 130 rr»v employed h ths pressst iayemiea, For exasnpte the sarermffscatfer! msda»« 138 raay "meluds iateractise 
feiavisicn Mwstks, tisphees nstwarks, wirsfess dsts trsssrrlssiea sysieais, tiise-wsy sable syetsnrs, siMamksri 
eenipater Mwarks, ictsractivs kie^k aetwerhs, aatan^tis taier reaAe n&twsriis, snd the like. 

Ons popular psrt ef the Intsrnst is ths World Wkte Weh, The World Wide Wsh ecatains diffsrsat cewp^s 
which stars iscurs^irs sspahie of displaying graphical aed textual iafarrssiioa, The-eerrpters chief's prewks-kjfsnrstiari 

38 an the World Wide Wsb are topically called "wshsrtes; ! A wehsito is defined hy sn ialsrrsM address vshieh has an 
sssrjsistad alsstraale papa, Ths gssr^roasc pap ears be identified hy s Uniform Bsseareh Lecstsr {ORtK 8eneraSy t en 
eloetrartle page is a dossarsent wleesj argaeim ths presaetatien af text, grsphicsi tegss, autho, and so forth. 
8, ths Us^ Cogsautst 
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Ths vm conpjtsr IIS, sfto&n m f^sm 3, is s deface which atsws s ose re intarsst who Sis 
eemmurfetlas mffitm 130 (Hgusg U Is 888 eaifeoe'lasait. the user earepotar II § h a seavaniiaBs! geaeral ptifpsss 
esraputar using ass w mare faisrsproesssors, such as, f ar ssamaia, a Paaisuai processor, a Paattes I praesssar, a 
Peatta Pre processor, m >;>:S8 proaassar. m §051 prossssa?, a MfPS preesssar, a Power PC arasesw, m m h\pU 
§ arsesssar. In w® mhySmwi. the asar computer IIS runs m appropriate operate system, suaa as, -for example, 
l^iemseff 6 Widows® 3.X, ffessit® Wm&vm 88, Mierssofr* WWw^'NT, Sfcasaf^' Wsociaws iS SF„ Pate Pilot 
OS, AaaV F<feeOS s , CM Operating System (00$), «, tmia®, o* MM* 0SI2® systems., ia ««a 

srtbsifflBni the aser comparer 11S is spippsa" mih a cefssrentfassi m&m or ether ustiverk connectivity sects as, for 
exaaipis, Ethernet (IEEE 802.31 Mm fileo, iiEE 802.51 fibsf Oistfiaafed DataiWt iMertaee fOQIj, ar Asyoehrwos 
13 Transfer luteaa fABU). As is saavaetisaai, in aue amoofjiraant, the operating systarrs. fodsdss s TCP/IF stash which 
imnrites ail ineanino, ana* wi$sk% message traffe passed over tha eemmuriieatieo maium 1 SO, 

If? other ernbaeoaeats, tha rssor compute? 1 1S may, for e^rasrspis, he e computer workstation, s fesai arse 
netwsr k af iooMfiaai eansputars, as krteraetivs to-iavlsiari, s?i intaraetiVa triasis, a parsonsi riipjtai assistant, m interactive 
viarafass ■ camrmsikstiafis device, a hasidbe-ld soiifotsr, a tsjgpltsiig, a rooter, a satellite, a smart carii an srehesMesi 
IS campting device, w the like s4iiah can interact with tie carmmnieatiim mate* 138. Whiia ii sash systems, the 
aaaratmg systems will s$fsr, they mi m&nm te provsds tte appropriate s&rnniynfcatbiis pr oi aeols m<kd to astsyisis 
csfnfaariicalsosi Ms w& &8 aommaaicatisr! mafai 1 30. 

The exaj^iary issar eompater 118 imsWes a browse? xmivk 310, a assr Risnapr 320,- .as es a 
rl8tabas>s eel'sctsen 330, 

« aii^siipraat, tlse osar comp uter 11 S atiiaes ssvsrai epsratboa! mMm iaelaifffj a am browser moriaia 
310. The asar temtw tmkk 310 Siaiaiaaftsf wtmsd ts ss taa ussfa fywtmi 310} ss a saitwera pragfam wasel! 
aiiav^s a fiossumer ta access riiffei'eo? ceaierjf pmviders tls^h ths ssBTORlcatto mdUm ISO figure 1|, Irs am 
mMkmfc ths user's erawser 310 is ths §atscsp# ^ssifjatsr de^eiepgd hy f'iets&eps. Ins, ar ths fVliefasafi® letarast 
1% Explorer a'aveiopaa! by ^tossft Oerparatiaa, One af ordinary ski is the art, however, mil recopsje -tfeat aomamys other 
typos mm ssf twam oouki also t 5 e asea 1 ia feplooreiS ea af tfe presofit iovesititoi Tiiesa otter types af 

access saftwara saair! ba, far essfapia, nth® types of iateraet bra^ssrs, tmtsm mtmtk arswsars, fA'a-v^sy 
sororfiaaicatioos saf twore, csble madsm software, paiat-ts-p^^^ sef twarp, sail the iike, 
2.. Ths Oser Maosgsr 

38 hi sag ambaiawt, the mt aooipsitor 1 18 ioelodos a aser rssoaper 320. Ths user fmnaaer 320 taseks and 

rjigfssgas a!? mntmi snd iicensas imM hi the assr essa^putsr 1 1S. la ans embssfimeat, the user mauagsf 320 jnay oe 
Wad oats ifse asssr eenpfter 1 15 thruuph a weh-aasati doweissd process. Irs the wsh-aasari daastod praoess, the 
user's btmm 310 x«ay ask- the aser if tae aset )&®M like to dsvsfrtaad the assr mseoger 320, i ths asar rssjwfe yss, 
feaa ths tea&sssi praaass ttexks to m % the aser faaaagar 320 supports the asar's fymm 310. If so, \hm the assr's 
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hrossfser 310 autemsiicaBy dQwrfcads tba user manager 320 anta the tier's eemptitsr. ft is reeagnfegd thai in sthsr 
erttbedimeats, the use* tnaoagsr dnwetaad ptsms wM he performed vffimt any aser interaction or the user manager 
320 ootid be sra-frsstaSad k thaussr earspatar 1 1S. 

5 

3. The Database Caiteetisn 
In eria embodiment, the user semaater IIS iadiKfes; a database A* 330 sfiws in Fipre 3< The 
exemplary database eellaetiaa 330 ipiudes sesarai databases such as a fatse database 332,. a content database 
334, and an encryption key diabase 338, wbfctrmay csstain ens or roere cryptographic keys, 
18 Tha ii'eease database 332 eeatsisss imorrptieo aaeyf, license ceils 220 that have bsan received by the w 

computer 115, The information, may brehide a copy of the license eels 220 as they are receives-,, ar sxtraefas* 
Information sash as tha license «des, the acarssa self Haade* mf arrnatien, ami so forth, 

The content database 334 contains irdwmatien ahent eeatent eeiis 210 that have seen received fey the user 
compter 115. The informatien may sncbrde a espy af Iris coateftt ceils 210 as they ere received, or extracted 
IS inf armatisri mcfo m the encrypted content, the eeatsftl cell header infarmatioa, and so forth, 

Tlis encryption key database 338 Ineiudes the ksys received via ths torn cell 220 tfef the user manapt 
320 may asa to decrypt tbs encrypted contest Whiia ana sfnaerJment uses symmetric key aneryetiae, it is rseeaRkad 
that in ether erf&oeTotents, ether -methods of encryption may ha used separate fr&m or h tmpmim mxh symmetric 
gjicrypiiOR. 

M Is ens eenhoditneat the database oelMtisn 330 is implemented using a tfe lite database strsetnre. it k 

re&gnasd thai in ether embodiments, the dstaksa selection 330 cauid be implemented using different databases 
aecb as the relational database Ifcoseft' 55 SQ1 Server Awing access ta the data via tbs Straidwa Query Lsnpap 
(SQL), Moreow, while tbs database ea&sette«-330 depicted Is flpns 3 is compiled of sswai ssperata sfstsfeases, it 
is resopijsd that in ether embodiments, the datsfeasa caiiactiaa 330 may -.caMais ether dataaasss or mm af the 

2S databases ccaid be-corahbtod. in addition.- the datahess ceiiectiao 330 may he iroplsaigfited as a siatfe database with 
seprata tables m as ether dsts struateras that are mil kaaw «t tha art sect? as iiftkad lists,, hiaaiy tress,, asd so farm. 
C, iMysea^.M aaagemsat %etsm 

i^ ens emhaim.sat t the license meeagsmefit systecit 120 IRgera 11 mestaps tiie mtfkn and issuseee of 
eoeteat end iiseasaa. it is raGogaKsd that in ether errfcadim&rts, the iicsnse rriaaagameat system 1 20 raay ariraariiy 
30 msoap ths issuanee of eeataat caiis 21 D aad iieease ceiis 22D; end other msdaies ssrdd sraata the gesnse ceiis 220 
aad/sr tbs cantata eels 210, As pravisasiy diseessad, the llssese msoapmeet system 120 .comprises twe prfmery 
eea^peoeats, the eoeteet rrsaaagar 124 and tna effer raaasger 122. it is rscepdzad that ia athar gmhafcsnts, 
bawavar, tbare eeeid he oiihipfc coeterst srdnagsrs 124 assizer rmetipie offer ajanegars 122. 
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1 . Tha tmtmt itasgef 
Bpr& 4 ilwslratss <me arnaoiawi?. af a content aiaeager 124. The rasmplarv content manager 124 
inekSes wab server set ttssare 41 0, a content manager' ssmpsrfsst 420, es ««# as a database eslleetiaa 430, 
s, Server Software 

§ is> ore erHbadiraant, ths eaoteat manager 124 includes wsh mm software 410 as sfcawa in figtss® 4 The 

web server software 410 may te, for example, iMse^e's Inter'aet Server software, Microsoft's fotemet Server 
Software (ISS) f sr tha Ike, Stish wets server seftware 41 0 is configured to process messages frem the aser semester 
1 1S and tha sITer manager 122 ss fastratsd in Fsgyrs 2. 

a. Content Manager Coirspeaeot 

18 la orse embodiment, the ceateat manager 124 iaciadss a sealant manager cemaasent 428 that msrsages the 

crsatioa and isseaaca a? content cafe 210, The eentent manager cemnMnt 420. iterated in fipe 4 comprises tws 
processes; the asar raanapr dawrted areem 422 ami the seriteni eel creation .process 424, Tha cejrtaat manager 
component 420 may else include atfter procsssss net shewn such -as managing, user rsptratiDa trasktag the 
feventarv. af the content sals, as we! as pravie'feg a search engine. 

1S lie oser manager download preesss 422 flownfasds a csgiy sf the aser manager 320 oats the aser campurer 

1 1S. It is recagaized tfcat In other anfedlments tha ass? manager download process 422 ceuld to aerfarmed by attar 
rnMste or the user manager 320 wM be pre>instaW en the asar eoaprtar 1 15. The carter? ceil creation process 
424 may he imrafeed when the user computer 1 1S rsqeests a piece of content, ami tte process 424 creates a content 
ssll 218 with the guested contest. White in thss smboimeat the patent msaasjr 124 incina'as s contents creation 

20 process 424, it is reeopssd that in ether emhe«fesnts, ether medales raay areata the eastern astt .210, and the 
cantaat manager 124 may Brfmsr% msaaga tha issuance af the c&rttent ceil 210 fey locating is eantest sail 210 
rather than creating ths content cell 21 8, 

a. Database CeSeetkm 
fa <sm embodiment, the content maaaaar 124 jaciajfas a database eei!ast|sn 430 steam Is Fipre 4. The 

2S axer^fiary aatabasa collaetioa 430 iaalaa'as sevaral jfsialtases sarj as a rales database 432, sa eaervetiae 
M&bmi 434, which raay aaataia ane or mare syrmna»k keys, a paalia certificate rJatabssa 438, a csatent database 
438, saci a ael header lutereiatiae dstebese 439, 

Ths rales rlatahase 432 carrlains rules pertaifsmg ta haw aaa" vim ta assign rights ta a place' af ccntant 
Tha rales cars ha garierai (e.g. f Csaleat X rsspras License Y) sr they esa hs mare specif ie {s,g„ Aayeaa with Liaease V 

30 esa print Cantsat X; To prstt Cantant X< need licansa Y, alsa go ts URL 01, Wis Fsfjure 4 shows ths rates as heisg 
stated in a rales detahass 432, it is rscagaijad thst-fe oth>sr smbafesats, the rales raay he stared at steer ferreats 
sash as a pragras? at a set .of scripts. 

The easryphsfi ka? dalakse 434 cantaias a set of s^moistiis keys that the eeetaat eisaagsr 124 may osa 
ta eaarypt tha ■ requested ceeteat Ths symmetrfe keys raay he created using teshalpes well keswa m the art, far a 
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mm MtM desertion «! symmetry asd asymmetric erscryptJOR, plssse rofer to "Applied GfVptesjrapfs*/; Protocols, 
Alpritta, sad Ssaroa Cods w C, Second Stiffa*' by Brocs Sehfmr, Published by Jeta vn* & Sens, 1898. While 
this ofnf^iraarft am syfflrrsetric enervation, si is rgsopkad tfot in slhsr OTaadlrssnts, sthsr methods sf encryption 
may he usss* separate from Of ® mimtlm ssith symmetric sseryptto, 
5 The public sertiflsats tfatsaase 438 contains public eartificatss from .oiiw cemgesests with which ths 

content manager 124 somnisRieatss, A cesfenast's prfefk encryption key resides wtim the cerflpotlant's public 
pralissta. For example, the public eertiffsate database 436 may mtm ths pbife csrtsffcatgs of ths sife? manger 
122, which mntw ths pefic keys si ths offer manager 122, to silos* for encryption and aut^ntscatioo wiser; the 
contest manager 124 M tl® offer manager 122 cemrrspieata, Ths puhk certificate dafasase43S may else csntsis 

1 51 paiie certificates of ths am eorpslsfs ! 1 .5 that request piac.es ef anient 

Ths centsmt database 438 contains iniarrnatienasout vastus Pisces of content as wail as ths content itself. 
Pisces of tmtm ma? aicfada seand files, video tiles, text decurneats, e-mail database raeerds, KygerText fJsfimp 
language mm fifes, Extensible Markap Language fXJBL) files, Baetrenfe Dels iaterebsnae (EDf! flies, Msssap 
Orfested iiddfewere iU(M) fifes, sssestabie scripts, and ss forth. Ths eonterrt databass 438 may sndude tabfss saeh 

IS as a phsfshers table, a paMtaiions tabls, and m articles table. 

The publishers table tracks inf ermatlsn abset the publishers. The publishers table- may insiade Mis sucn as 
publislier ID, status (signifying whether ths pabiisbsr is active er inactive), pahisber name, dafauft piles, aid se for*. 
£ssn pfefishennay parish one or mere publications. 

The pnblieatisns tshis tracks Ififormaiian aW Use publications. The pabfaaass tabis may instate fields 

20 such as publication 10, states (signifying whsthsr ths psMsatba is scfivs sr tastivsl pbtoiias cod% prapsrties, 
pabHshar 10, demaliv psiblicsbesl nasm Pisbieatia^ tie type, pbtotips web «ddrm Mrstory credit, default pries, 
liarohst of im srtieies, prim Ml islgnifying whstbsr printatg is psreittsfll aaayfW {s^»fyi»8 wbstber espying is 
permittee), ane* ss fortlv Eash piiblisatiae may -Wade m or fiw artides. 

The srtkiss fehia tracb iaf^tian ahast the articles, or piecas of content. » the farm "mkkf is osoi 

M it Is reaapbd that the t»m "srtiela" ma? meina'e pieees of oonw sncb ss aarsruf f iiss, «dss liies, test doa»aar»ts t &- 
rM, datato racsrds, HyparTaxt SSarkoa bfiguap fHTIVILI fifes, Extsassbis Markup tanpap iXMO fifes, Sfectroma 
Oats imaronanp pi| files, iessags (Wanted Miaatets/ars mm fries, axacataisie- scripts, sr«S se fsrft. The artieiss 
tabfe'raay ifisfefe fields sucil ss litis, time stamp, pefeatssn IB, pubiishs? 10, pries, yaiisl time period, soft type, sad ss 

tO/lh. 

38 Tl« carftmt dstebase 438 may iaeiuds ate tapiss m rsta-tc- Use centers s«sh ss a ss8SC#ii8rrs tsbia, 

an admiPistrstsrs tshia, arsd sa far*. The sabserinirons taaie defies various salsseriptlaris ond ftrciudes fields suah ss 

s daseriptias fielri, poblisation IB, prisa, and ss forth, Ths sdrsircstratsrs table tracks special aseesnts thai sra 
aptborfesd to psffarm admiaistmiw tasks sash as sattiag prices, sxpiratisti dstes, preps, mi ss forth. The 



8 



s^rsstrstars table may Inert fiaids -such as asms, pmrnrnd, small addrass, telephone mmb®, pusher 10, 
admMstratsr fees}, permission ts maasaa groap scents, permrsstss is marssp promotion, and so ferth. 

lis cell teds? !nf8«oatk»? database 439 esntsins brtorrnatian ahest the.eaS header. This inisfmarisa may 
Ihdada- imp® identifiers far each content csi! 210, irtfarraatteft about issiaas stores that prorte ths pisses af 
§ eastern, dassriprive feieraiaties, as well as yaiidstiafs: mfotmarian Ss.g„ axpiratien dsta/timat ■ 

In sasneejdon v«th the database mhtim 430, h arte embodiment, there stay be several preessses fadt 
shewn) such as 10 paiwaters, sanier p&eratafs, statistic generators, session pastors asd imp stsrage units that 
work with the database enaction 430. 

is see eeifesdiaiaat, ths database .eetatjeri 430 is Inrpiementsd asing tha t'ajatiorjai database Microsoft* 8 
18 §81 Server allawirsg access te the slats via ihs Stractyred Qasry Language (SOD, SSL is a isapags stsndardksd by 
the iaternafipnsi Standards Organksiian for rJefirssg, updaiiss, and varying a ralatianal database-. 

it is fecapsed ihst w athar eaiaaslrnarrrs, fhe-.dataaass cefetisn 430 eeaid ba irspferaarit-ed tisina. a 
different rsiatiasai database as weii as ether types of databases {such as a flat .lite database!, Itereew, whig the 
database aslactios 430 deleted in figure 4 is eeaiprised af sesnrai separate databases, It is reeepsad that la other 
IS ambediments, the database ealaatsaa 43D may contain other databases or soma of fits databases smM be combated, 
in edition tha datahasa eollaetiorf 430 may fee impfemented as a single database with separata tables er as ether 
data stracteras that ara w& kmw m xhs art sash as h'nkad lists, biaary trees, and ss forth, 

In sag ernhodiaigat,- the database cslteetion 43B nray as eanrsselad Is a backead sesrsposast htet shewn} that 
receives database requests m sandets, jarsaii pragrams that nsr* on servers, and seeds a so:rf8spna%fj SQL repast re 
20 the database eafetiars 430. It is racapizad tfrat is other arnbsdsriants rials access seuid be psrfcrrasd differetjtjy, 
far example* a different type of baakasd campaaarst twW be asaa ar tha dersnasa estetioa 430 ssaid be accessed 
dirsctiy. 

A aisre data'fed (lessfiptiaa af sag arsbedanest af a database caieetias 430 am be feaad In tire attaebsd 
Append^ A, Wfie tire database collactian 438 fa Appesdlx A iastratas a llfisasg rasfsags^aat syatro 120 wbareia 
25 lhs easiest mana§er 124 and the affsr maasaar 122 batb aawe access te tha ssnsa database caiisctiaa, it is 
rseepfeed tbat in otbsr enihcdimaats, tha mtimi mm® ft* and tha alfar n^nager 122 may have separata capias 
at various datatees. 

2, The Offer ^stiagei' 
Fipara g illaatrates ana embalmed of an slier maaagar 122, The axarsplsty offer n^nager 122 iadadas 
31 wsb server saftwsre 610., m affer master sampsasnt 528, a licarssa nanager 830, aad a database ealfeatlBfi §40, 

a, Wsli Server Soft&'gfe 
In ane arf^odirnent the effar rnansaar 122 ifsdudas web server software B10 as ahawa la Fiaara §. The mh 
smm software 610 may as, far asarapia, ttosaspe's iataragt Sarsrer sefiwara, Micrasslt's Internet Sesw sattwsra 
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siSS), or the like. $u$ vseb sgtVer software 510 k casliprsd to smssss .massages Itam the aser esmjHrter 1 15 and 
the ssnf ant manager 1 24, 

b« Off ar jtaspr €s?sta aaeat 
k ens arnbsriirnarii, shswsist Figure §, the offer manage? 122 mctafes an alter manage eompoaent S20 that 
§ manages the issuance sf feanse eslis 220. Ths offar manapt csropawat 820 \m\< alss iosiMda processes Cast sh3««j| 
asrii as managing interaction with users, detsraiRtaB, whether sjsse farsrlremsrits tosm bmi satisfied feelers ths license 
manager 530 Is freaked., syeh as Uackmu menstary payments, determining ®betl?er s tese was Issued, as v*!! 
athar sroeosses. 

e. tfcsase fesapr Component 
In ane gmbeirnem, ths offer manager 122 inrHudes a iicansa manager 830 that, manages fie faction af 
Iwe eels 220, The Issansa manager 830 Iterate Is iFigars 8 is esmprissd el a litem ealf eraatssn process 832. 
The licema ceil create proem 632 may hs imraked altar the user computer 1 1 5 rsanests a lisaase far a contatt cell 
18 210, Tha license sail craatiea pracsss 832 tmtm a license eaii 220 fs» ths reaaestad sMent We in this 
smWiment the Ssense manege? §38 saslsaas s contents creation proosss 424, it is tsespized. that in alter 
SR&gdimants, sthsf modules fnay sraate the Swiss eeii 220, 

Far example, the slier snansgar 122 oouid inektda a license ®& ersstlon process 832 sad create tha license 
cells 220. Howavsr,. la one ert&oalmant, assther tm&M may crests the iicsase eel! 220 such that either ths license 
28 manager §39 sr ths seatest manager 1 24 need only tats ths appropriate license cell 220. 

Tha Ifesnse manager 530 may slss mefatia other processes r»t show such as rnanspia. ths repository of 
i%w$ fensas. Is addition, la one mfossflmtit ths license merssgar §30 accesses tha Issued Beense rlatahass S47 
tracing aadi tfme s imi tass is created. This s^n^sffaU rate allows ths fwsa swagsr S30 is act as an sadit 
trail sf ths fiesssing proce^ asd to pravkie rspestarl SIdssss mfsrn»ti»n tn iMm swMm, 
Z% 4 Ostshasa Ss&efisn 

la ane. errWirassf. ths sffar aiaaagsr 122 m&sttes a Mttom aeiteOan §40 shw m Fipura S. Ths 
sssmpiary datansse calsstios 840 hsM^s ssvsral databases sadr as a rslss dsiabssa S41. mi -ari^tian key 
ristahasa 842, which may esstafc aas or mars syrss^rsts keys, a public cariifets datahsss 543, a.costsnt database 
844, s user dstsfease 548, a gr>aap database 546, an issasd fassa databsss ("Ssaasa slatslasa") 547, a hliSiag 
30 database S48, and a ssii teaslsr infarmatiss dalahass §43. 

Tha rales database 541 cont&m rsilss absat hm ssd ®haa to sssip fights to a pises of aantarst The. nsiss 
caa ba geseral (a.g„ Saataat X rsprares Liaaaso Y) or they caa fee rscm spsra'fie S8,g„ As?o»» with Ueartse Y sm print 
Caataat X; Ta print Ooateat X, wmi Utmss Y, aiss p ta URl Gl VSWa Bgars S depicts s rsfes database §41, it is 
rscagnsesi that ia stbsr srahadimaats.. tha ralss may ha stored m other hitmis sash as 8 prapw or a set of scripts. 
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The aacryctran key dsiabsse 642 contains s sat ef sytrinsfnc keys used ay the csrstent manage? 124 te 
encrypt &e pieces ef rested cants-at. The symmetric kep may be created estop techniques well kwmti in ths art. 
For a mere detailed dssersptlsn «f symmetric aftd asymmetric snctyptiaa piaas& refer to 'Applied Cryptography: 
Prstscois,. Algorithms, and Source Cods in G, Secead Sit loo;' by Bruce Sehassaf, published John Wsfey & Sens, 
§ 1 986. White this srrshasinant uses symmetric encryption, k Is recognized that in otbsr emWments, other ruetheds of 
encryption may be used separate: from ® k coajuriatian with symmetric eaeryptiers. 

The public cenifieats datahsss 643 contains a set ef public certificates fr«m ether eomparisnts with which 
the offer mausaer 1 22 eomrmmieates. A csspwfs public eecryptian key resides within the eeaspanent'S public 
certificate. For example, ths pMk certificate dstahasa 643 may centals ths pohilo certificates of ths eoatent 
1 8 manager 124 ^hsch contain the public keys of the coatent manager 1 24, to aiiaw for setheaticetiait wiw ths content 
•meneger 124 and-iha affet manager 122 esmmpfcate. The phiic certificate database 543 may aisa eoatala public 
certificates ef ths am camp titers 1 1S that repast licenses. 

In certain embodiments, lbs sffer aBneeer's aaritent database 544 mf mcinde part or el ef the content 
manager's content database 438. The eewtent database S44 may copy data fr«S ths content menapr's content 
1 § database 438 using date, replication techniques vseli kitwo te the art aiiawina ths stf er maB3§et 1 22 aud the acrrUant 
manager 124 y& aach hsva a copy ef the same date without destroying the data's tetegrity. Mereaver, the sffer 
manager's content dalaeese §44 may include mfafrnatisn mi in ths contest manager's csrstssd debase 438. While 
this err&adirnent depicts the effar manager 124 end the mim\ manager 122 each haying its o«in copy off the same 
content database S44 438, ft is recognized that in ether embodiments, the offer manager 122 and tha cental 
28 manager 1 24 inay both haw accsss te ths see® sset est database, far delated inf ermatisn oa one emhodanaRt of the 
content database 544 please refer to section entitled 1 , Content Msaaesi" --• e. The Database Coilsstisa. 

The osaf a'stahasa 54S treeks iafotraatisa en the «sers, The aser database 84S n^ycsstaia tebios mh as 
a \m infanrnties table, a osar credit csfii infofmslian tshie, a oser ssmaiests table, and a aser aaceunt nalaaces 
table. 

Tha user mferrna&n table ineiedes yor»8tf«8 &be«it the users ef the system. The user informal tahie 
maf inciade fields such as user sseeuat IB, first aama, last mm, cmspny, eraoii address, wwf. creatbs date, 
acceant states, cerrant eharps, currant credits, eatsteoslieg 'Mt, mmm fawi, premotfsn e-mail, remote user, reaiote 
address, reo^te best, hiilina nsma, hillirsg sridrsss, passwsfd, passwerd «wryptis8 tyae s sad se forth. The aser credit 
card irsfarmatiea iabie keeps a record ef the tissr's sasryptad credit card masier as we§ as ather credit card 
38 iefaramtiea. The assr credit card Infermatieo table may delude fields such as user aece'um IB- credit card aacryptian 
rnethod, ensryptefi cradtt sard slxaimt. rasmfcej, sresih; card exslsstien month, ersdH mi sxpiratsoa yes?, and so forth. 
The users eemmams table tracks cssime^ts specifis to a parfiselar aser, aiiawing ier castamoed aasiereer suppart 
Ths aser comrassits table may aiciada fislds secft as aser acssuat ID, tfee stamp, carement fieid, and ss forth. Tha 
user ssceant balasioe table haaps a record of s user's credit and charges for each specific pebheatien a user has 



11 



assessed. Toa aser awunt balance table may Made fields sash as user account IB, ptdfeafigtt 10, tioia credit was 
created, available credit, credit ameant spplieri curreot eharp,. pricing terras displayed, as mil as ate .information 
related to tha user's aceeant 

Tha group database 548 ates trsars to ha ceasalfdat&ri M$ a single acsoast, sudi as a corporate aeeeant. 
§ The group database §48 rr?ay lecfada tables ands as a grease table, a grsiip users table, and a publications table. 

The groups table maintains grasp related mlsnr-stkm. The groups table may indada i;*icis such m group ID, 
grsap mm, password, type af aeoearrt, mimm of slays the accounts are valid, nuh&sstien !B, expiration date, and sa 
forth- The group users table identifies the members of a group. Ths group users' tsb'e may include fields sssch ss 
group 10, assr acceant 10, expiralinntJate, .ami so forth. The areep puldicatiees tabls idestifies whish puttieftstas ears 
1 8 be assessed by the group's alters, Tha preup pbiissrjgns table irsay Include fields such ss group ID, sehfetisrs 19, 
and so forth. 

Tea license database §47 may contain several tables sach as an issued license table. The issued iicersse 
tabie records esery fiesrise issued to s user that aiiaws assess ta aa article. The issued iieaasa table may include 
fields such ss transaction ID, tsma sterna, articte ID, content sell fecatfen, tm\m ceil ©> framework 10, publication 
! § ID, amount ahsrgsd, srsti ss forth. 

The bifug dsts&as8'S48 manages ths bslstg transactions. The Ww§ database 548 msy IneMe tables such 
as current transaefiess, hiilsbla transactions, billable sunsaarfes, and so forth, if is raespged that other standard 
biliriu iof ormstssrt may insiudsd in ths billing database S48< 

The sail header tafofrfiatis.fi database §40 eeataius ssfofmattori for fba sell header. This infermatien msy 
20 inclose unique Identifiers far gash license call 220, ertsspe Identifiers for each contest ceil 210, infsrfnatinn about 
various starss that produce iha pissas of mimt, das»ip^«e feformatiaa as wsil as vaisslsrioR MfsraBtiaa (s,g„ 
expiration dats/time). 

Tha database coiiectioa S4D amy sisa include etber databases- iaat sNswjj! for pgrfomsng ifarisus 
rr«§8ineftt tasks. Fa? exarf la, the tiatsfcaae cslteeta 540 may snciads a m& action database that traces various 

28 ass? satiety such as user requests, ass click thraaghs. |f?ackfa§ sash tims a user selects a wsb M), aar! so for*, la 
ac'rlstiaa, the database eefeien 540 msy iaclada as error database that tracks saiiaas system arws such as srrsfs 
raiatat! to specific articles, errors- related -to uaw users, arrsrs rested to nm iicansas, and so forth. The database 
eofatrsn S40 raay also include a' .database for ojamtaiaing data Intspty, sach as ygriaos syaehfoaKatiao fables that 
aiest the system when new Marmaiis-o sbsaisi bs added sua! .far existing Msmjaiba shaald hs cha^ad.. The database 

36 coMias §40 may also iasfcde a pmotism database that tracks the promotions sent ta ths user m email and ate 
sammijffisatfsn msaas. Ths dataoasa coifactkrs 840 pay aiss srafads user n^r»§or aetlyatian sal offaatiea far tracking 
ths aurnber ef times tbe user attssipts to lead the user messuer 320 ooto one ths of ths asar's competing imhm, 
whaa tba user alterants to reinstall the usormaaanw 320 auta eoa of tha user's confuting rlsvicas, ®Hm tha user has 
varifW the user's 10, and so fortit, 
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to canaeetieR wih the database ealeetie:a 540, in oas ssriharirrnaat, thsra may ik mmd processes (eet 
$bsm) smh as ID generators, rxanher aasaratots, statistic psaratem sassier! generators and teras storage uaits ttmt 
we'rfc «»itb the- database ealeetisrs 840, 

to ens embssdifHssit, the database eeiteiaa S4D Is Implemented rising the relational database Micros® 
§ SOI Server Slewing access te the data via the Structured Qmy tsaauage (SOI). SQL is a language standardised by 
the imaraatisfra! Standards Organization far defining, updating, sad $m?m® a relational database. 

It is recognized that, in other snsbadiraaats, the database aellastiefi 840 cstdd be hnpieatanted aslag a 
Msmat rajataal databases as wall as other types of databases (saeh ss a fiat file database), Mereoser, while the 
database eaifectios 540 dapietad m Hgera 5 Is coop-iced of sesetel separata databases, it is recognized that to ate 
18 smaedtmeets, the detaaase cailectk>a 548 may contain otter databases at mm a! the databases ceald be camairsatL 
in addition, the database eallaeiioa §40 may as implemented .as a single database with separata tastes m as etaer 
data structures that are well .knavs? in tbe art sach ss linked lists, binary trees, aad sa rertli. 

In sua srofeedarieni the database collection §40 may be-eeenacted to a bactead rxfaaansfst (not $®m) that 
receives database repasts via sarvfets, spall programs that fan an. sews, and seeds a corresponding; SSI rarpest te 
18 the database tsfetsoss 640, It is recaiiaixefi that is after sebedfraants data. access cmdd te astfemied differently, 
'for example.. a different type at backsnd eompensm eeoln" ha asea ar the database ealacfsoa 840 ccaM be accessed 
diracdy. 

A. Rjore detailed dassdpitan at ens. embodiment ef a rJatabess collection 540 mn se fmrd in the attached 
Appendix k While tha database eeleetien 540 in Appendix A l&Mrates a license snarssgem&tt system 120 wherein 
28 -the eontaat rnanspr 12.4 saa the after manager 122 both have assess to the sasna database seilaetieti. it is 
rssspked that in ether effibsdiineots, the content manager 124 and the after amnagar 122 aiay havs ssparsts 
databases, which may be aiiks, parhy simiiar ar dilfarssit. 
Hi li£a»se iVlana-:H:maat Sysf ass Cells 

to arse eoAodmwrt the ileaase roaaggarrisat s^stsra 120 creates eals that eeataia content tcoataat cafe 
IB 21 0} as wai! as sshs that eentafc feeasas {iieeese calls 220), 
A. ^§|ej)L£i 

Figarg 8a ilastfates r>rse etrfj^iiaent al a saatest sell 210a. The gxsfaplary cantant sell 210s caotaios a set 
af mfes 812a, eocn'ptsd m&m 814a, a cell bssdar SISa, a pabiic esttrfieata 818a,. as weil as a e&atsM esli 
sipat!im811a, 
39 ! Tbe Rales 

Tha comest sat miss 812a tali tha user cempater 1 15 wki rights are associated with the saaW sail 210a 
s?id what is required ardor te have these rights. Far exae^ie, a ssatsnt sail 210a may ban see sat at reaaireowts 
far tbe rigftt te print as article, arid aricthar set ef rea^ifemeftts far viewing aa sftiaia, ia ana srabasfeat, tha ralas 
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812a maybe written for a specific am, sdie fa ether m&tuftwwU, the hdes 8! 2a may he written a;era pnsrieaBy 
and may apptv to a particular class of users. 

2. Eneryeled tmtmi 

Jim eastern eel's eocryptsd cameat 814a oeetains the resisted aestant enervated by the eoatsst raanagsr 
g 1 24. .In arse sediment, the ecfttersi Is encrypted asia§ a symmatric kay. IN sysTinetne feey is than eeer yptsd by the 
license- maaagsmeat system 120 asing the sifsr manager's pahilc key so that eaiy fee offer manager 122 gas decrypt 
the symmetric key asd the encrypted syttiffietric key is seat to the am maneger 320, When the tmt manager 320 
requests s license), the riser manager 320 sends the offer manager 122 the encrypted sysrraetsie key. Once tag offer 
maaegeir 122 verifies that the user eaefetet 11S has a valid feeasa, the after marrapr 122 tm decrypt the 
18 symmetric key and encrypt the symmetric key with the ossr marsspr's ensile by allowing the aser manager 320 to 
.figcrypl the symmetric key end thus decrypt the content. Far a mere dotted description cf symmetric sad asymmetric 
encrypts, ptae refer to "Applied Cryptography: Preteeols, Algorithms, asd Source Cede in C, Second Edition," by 
Brass Schuster, pualished fey Jeha Wifey & Sens, 1988. WSifs this embodiment describes a use sf a cen&inatisB of 
symmetric encrystitm end asymmetric encryption, it is reeegaizei that other rostbeds ef eaeryptien may be used, Far 
IS example, the offer manager 122 ■ami the centant msnapr 124 ecaki teth have assess te e database of symmetric 
keys such that the symsTistrsc key is net sent te the user sompatar IIS w&\ Iffs assr compter ITS has aatained a 
license, 

3. C«ll Header 

The cell header 818a eantains infomssfisrs sheet Ihe cMarrt sal 2.18a. Such infsnnatien may i»dude a 
28 uaique identifier far the content call 210a, iafermation sheet the stare thai produced the requested eoatsnt, 
descriptive raferrastloti, latormatloa for locating so offer manager 122 (e<a„ the Mi of the after manage as mil as 
validation mmrmatiers (8,8., Ration dateitirael, 

4. Pi-lsSsc Certificate 

The content cell's pMfc eertsfiaate OlSa js the public ceriliaats of the eel! creator which caetsias the ceil 
2g sraater's public key, fer sxaaipie, if the saetsat maaapr 124 creates the mnimi zdl 2108, thaa tha content 
aisaaper 124 wwM $m the ceil 210s and Irsciiide Its peaiie eertJfie&ta 813a in the earstent eel 210s, The pbfc 
egrtiljcate 818a $km the raespwrr af the eeil |e,g, the am earapoter 118} te verify the aathaatidty af the sender 
je.&< the content rssaager 1 24|. 

5« Coatarst Call Signature 
38 The content cefis digital sipaaturs 811 a Is s pleas of irtfarmatloa based es hath the csataet csii 21 0a asd 

the ceateat ajsaapr's private keys. The digital signature 81 la tm he usad sy the us«r esa\aoter IIS te asrthepticate 
tha crsatcr el the coateot cell 21 Da aad tbs l^forraatlaa agatamed io lbs eaataiit eel! 2 1 0a. 

Irs gaaeral, s d^itat siyeatiire is a cade thai is ankfae far each nressege and to each rnassap sender, 
Authantfeatimt rising digital sianstares assaras the receiver that the message vsas Iraai the expeted sender, end it 
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caafirfns itist the message fs cen^fets and has mt kmn altered. The §j$M stpa&re b I cryptographic raMss 
ttaagfi whfch the artaja of the sail and fas identity of tha sgnclsr may be verified. Fsr a mere detailed description of 
digital signatures, plssse refer ts "Aaaifed Cryptof aphy: Protests,. Alprftfem, arsd Soaraa Cad's Is? C, iaeaest 
g'fillon,'"' fey Brass Solrnelar, paiishad by Jahn Wllsy & §nm, 1988, 
§ 8, Other Sigostyres 

Figure Bo illustrates smthm erasotiirsaat of a oaataM cols 210k Whig the ftifes 812b, the eastyatad 
ssatsat 8Mb, and the eel header 81 So are similar ts these #ssnf}asf shave, each compensat has its mm digital 
signature B13l>, S i Si;, 017k Each digital signe rs 813^ S?Si>«- 817b is created by is laadale that eiaatad tt» 
component Fer'axamete, ths rales sipature 813b. is (seated by the raadala that seated 8» rales 812b; the call 

t8 haaris? signature 817b is ersatad by ths raadaia that eraated the cell header 61 8h. la ather smJuKtasts, different 
awstoles may sreate difforsnt parts cf the contest call 210, snd eacli madufe prasades Its. ssfisn digits) signature. This 
fanetiaaa&y permits the recipient of ths ceil in verify the identity of the sarapsnsal creator, la are'er ts verify the 
castor's identity io tisis emaealmant the corstent call 210 mast contain a pahiie certificate 8181) far each moduls that 
mated s part afthe eoatant ea8 21 0, 

1 § la stfegf aaohedieienf s ( digital sigratares esaid alsa he used far individual rules m sets a! rulss, Far example, 

iif ledids & creates: Boise X, Y, and £and Mobile 8 create Rales M and 81, than Medals A could sip IMas X, H, and 
I. and Module 8 eauid sip Rides f*1 and 8. Ths public certificates of hath Hodaie ft aud Module B woaW ag-sest m 
tie center ssll 210 se the user could verify ths origin af aaeh rula. 

It is rscapssed thai fc alter gaibedtmeats, ths content eel 21 D may oe eertpfsed of differem canfosants sr 

28 way Iftelude only a subset of the suave aTsotisoad esrapnnasts, Fartharmara, while wtitm ancryptfea tsehnHfuas sash 
as syfamstric easryptian, asyasaetds eaeryatiof^ w& elfjitsl dgneiarss h§v« hmn iscsissari,. it is rac-a^»'2SS* that k 
ate araseiresfits ether saris' at aasurifip security amy be usgfl.. 
B.« Ikms Gsil 

figure 7s iihrstrstes oaa sataimsat ef a leersse call 220a, The sismpiary itesa eeii 220a carvtaiaa s set 
28 at aasryptee' rales 7 1 2a. an snaryptsa' iissass 714a, a aaii l^egdar 718a, a pbKc aartificats 718a, as wail as a icassa 
ssli slpatars ? 11a, 

1 , Tha Haias 

Ths license eel! rales .712a tall the user eameate? IIS whst flfshts are sssaciatsjl wtk fte iieansa call 220a 
arrf afcat ia raqisrsd 'm order to have those rights, far example, a Seeasa call 220s mt hm aea sat sf ra^sresrsssts 
38 for the dght to print m artlda ead snather sst of rspiraaisats far viewing an artida. Is aas ensheirneat, the mlas 
may ha written for a specific user, while la other embotlimgRts,. the rales rmy fea written raera pasfiaally aad raay 
apply ta a particular class afussrs, la aas an*arianaat, hath tha iieeasg eel! 220 aad the esntgot eel 210 eaataia 
rales 612, 712, In ataar erahasln^Jts, aaly the llssase cell 220, aa|y fas eaafeat call 210. sr neitfiar ceataia miss 
812,712. 



IS 



2, Eacrystsd license 

The iicease ceif's encrypted Ibsmm ?14a. contains the requested fanss aacryBlad by the licenss nwrapr 
§30. k one mfowJkwh the liesrise is a arjq«e fdsntifssr. it is reeepksd that ie other enitmiimetsts, the fense 
emid he m$m type af data such -as a racers* af irifsrfmtsors an#>r the license cssjM iod«ds the wies. 
S l!5 soe emhsoirestri, tl» license Is sncrvpted using a symmetric key. Far exampie, the Seens® misU bs 

mwfpttii with the same symmetric, key ased is eraxypt tfse content fo ens anjbsdimani ihs symmetric key is thef: 
encrypted by the lissase management system 1 20 using the sissr manager's pahlc key ss that aniy tita aser manager 
320 can {tecfypi the symmetric kg? and thus decrypt the i&anse. !i$e this embodiment dssetifo&s a use of a 
cernhlnatisri ef symmetric anerypfien and asymmetric encryption, it is reeapsail that other methods of eneryptisri 
18 may in? uss-l 

3, Celi Header 

The ceff header 71 6s contains WsnmOorj ahoat the fersse ceil 220a. Such irieta?ation may laciude a 
unique identifier far the iieew eel 220e, an idaatifigr far related mtimt sells 210, Mernsatlsft about the stare that 
pfoducerf ths repested cantent, desstlpth/e irifermatjon, as wef as vaiidatien information je>g. s «j$rsfien dateltfme}, 
1S 4. Pubisc Certificate 

The license call's public eertifteate 71 8a is the ptshfe eestif seats ef the sail creator which contains the eel! 
creator's poblie key. Ht axansple, If the Heerise manager §30 ersstas the seems eel! 220a, then tha.hcesse manager 
S8S miM sip she eel! 220s and' irtskals its puhife certificate ?13a in the fanse ee)i 220.. The aablk serthlaste ?l8a 
allows the rsstpieot el the call the oser compter 11 SI to verify the authenticity ef the sender (e.g., the license 
28 mesepr 530?. 

8. Liesfiss Cell Sipatijfs 
The tome cell's digits signature 81 la is a pises of infermstiea based m heth the license eel! 220a and the 
license manager's private keys. The digital aipstara B 1 1 s can be essd by tha user can^tar ItSta sathern%s.te the 
sraator ef tiss license ssi 220s end the imorsrsstlee centainad b the iicsuse eel 220a'. 
2§ 8. Other Sipstwas 

Fipra 7h llfasttatas aasthar efshodimcnt ef s Iseenss es!! 220h. Wfils the raiss 71 2b, encrypted license 
714b, anl eeli hesder 71 6b are similar to thess daserihet! shim, each ssnsaarsesst has its a»?a digital sipafcirs ?13b. 
7!Sfe t ?17h. gash alptai signets 713h, 71Bb, 7 1 7b Is created by the mcsuis that crested tha comss«t 7 1 2b.. 
715fe, 718k, For s-xaajpie, ths roiss slgristyra 713b is crssted by the snedela that crested the rates 712b; ths ee!! 
38 ihaadei' slgrratufe. 71§h is crssied hy the ateduie ttist crested tha eel! bssdar 714h, is other embc'diineeta, different 
mtMvi rnsy create iffsrertt parts ef the Icease sell 22013, end thus each m«f«le provides its mm digital sigeatere. 
This funciiana&y permits the ms$m ef the csii ts «ar|fy the identity sf the campsnaiJt create, te order verif y the 
creator's icleetity Is thss sn^hedimaot, the license ee! 220b roast contain a pehile oanrfseate 718b far each msdula that 
crested a part of tile license csli 220b. 
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In ether ooiaadsmsats, diaitei sspalurss mM alsa be used to sip Mhi&si roles or sets of miss. Far 
ejtsmpto, if Module A sreates Huiss X< Y, and I sad ftMda 3 creates Bute M and N, then Madtsls A could sip Rales 
X- Y, and I, and Module B mM sign Rate 8/1 arid fi The p«e& -certificates af beth MwMs A and hlsdefa B would 
nged to fee sent- in tne feasa col 22Q so the user could verify the ariaja si east* rufe. 
h it is reeag-okas' that in ether sisisodimsfife, the Hewe ceil .220 may se carosrisad af different components or 

may srrsfudo only s subset of ths sbava mentioned annas-seats. Furthermore, white veriaas- encryption tsshaipss such 
as syfamatris anaypiior), asyasmetrfc enetyptien, and digital sirjpstures have bean discussed, It Is recognised that Irs 
other smbBdiments other means af ensuring sscuoty rosy be osed. 
IV. lief rase ittaaprosal Proces s . Qyarvjsw 

10 Figure 8 illustrates a flowchart of .one embodiment af the how si information previously discussed in Rgurs 

Z Toe fio^ctert itemed in Rpre. 8 esrresaands with the flaw sf information is fipre 2, wherein stats B2B 
corresponds sriis event A; stale 830 corresponds with event 8; ststa 849 aarrasponda with asenl C; stats 888 
corresponds with event P; state 380 corresponds with evsRt & and stats 8?0 corresponds with event F. 

Beojanirsg at the start stats- 810, the process proceeds u the user sempter request state- 820, Is state 

IS 820, the user computer 1 IS reoussts s specific alecs af content sad then proceeds to too content snanspr saad state 
§30, la state 830, the content rnonsger 124 sends the feqaasted piece of content ts the user computer 11 S and 
praceeds to the next state 840 in which the.usar somauter IIS repasts a fense. In stats 880,, the offer manager 
122 sends a taseto tog user cornpatet 11S ana* praceeds ts state 860 in which the user computer 115 ehaeks for 
the recpjested eantarri sad the eerresaandiRs. faasa. Oace those Items are found, ti?e process praeeeds ta state 870 

29 vifherese. the «ser maosgar 320 Iwakes tk& apprapfiate sapiicatiaa with the requested ceriteet Ths prossss then 
praaaads to the ead state BSD, 

A. User Requests Content 

In aoe emfeodlroent,. k state 820, the riser «ews e vs/eb paga osiaa the user's hrawsar 310:, Um, the aaar 
rsqaests a peee of aantent ta warn, srfet, copy, play, etc. it is rocopfcad that h alfrar emtodkaerrts, lbs user mM 

2§ request a piece of amtmt -by a ttarop dog to access a cestent self 2 1 0 seat ta ths asar via s-ajosi leoated s« a storage 
aait aaco as a GO-BOi^, fiepay disc, am! ss forth, h additiaa, io ether aaihodpsaats, ths aaotaat request mU oeear 
wi:thaut iafarmiag ti;a asor. Far sxsfsrpia, whaa a certain ooftrpater application is executed, the aampiitor prsgrooi 
oppiicatiaa eooid aotarnoticaiiy send' a request ta thesontsni waager 124 requestirig a place af content 
S. Content Manager Sends Coataot Call 

38 With fefarsfica ta stats 830, ths caetent raaaager 124 fiads tire requested piece af content assi then 

prepares the content for prsseatatios to the asat- sMrnputer 1 1S< Tha fiawchart corrasaandino to state 830 is further 
illustrated in -figure S. Begaasing st ths start state 830,. the process proceeds ta stats 810 whsreia tha caataat 
roofsagar 124 -reesNs the g«e« raauest PreeeedfRg te stats 920, tfte corstoot manager 124 bails the ssateot cell 
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210 ceataialtsg ths requested eentan? -and mm to stats §38 whstwi the cement irss'aager 124 sends the' content 
tsM 210 is the user's hrewssr-SiB m ths mm computer 1 1 S, 

While in this eafeaimsatf the esatsrit Onager 124 hello's the eanteat sails 210, it is rossposad that to ether 
embodiments the contest roseaae* 124 nisv locate s pre»hoiii: m\mt eel 210 vvithin a dstahass. As grcra'ensiv 
§ described, ether mtMss eonld MM generis content cells 21 0 and piece them in, a f^ssU&ry such that ancths? 
models, such as the content manager 124, coeM access fig contest ceils 210 and set*! item te the user as requested. 
Additionally., tha cement sell 210 mM ae retrieved from a disi a CO-BOIC as well as ether storage devices. Alter 
the contest manager 124 huids the content sell 210 in state 820, ths centerst manager 124 sends the content call 
210 te the user's browser 310 in stats 830 and thea ereceeds te the end state MO. It is recognized In ether 
1.8 smhadimeots, the eantent sell 210 csaki he sent directly to the user manager 320 end mt to the user's browser 310, 

€. User Computer iReguests A license 

The flowchart eerreseanding ts stats 840 whan ths user computer IIS repasts a fesnse Is illustrated in 
figure 10. 8egia«ing at the start state §40, the process pressed to stats 1810 wherein the user's browser 310 
receive the contest cell 210 and passes the contest cell 210 to tha user nianapt 320. ths user manager 320 epsas 

1S the cMani call 210 la state 1020 end proceeds to stats 1030 in whieh the user manager 320 verifies authenticity af 
the content eel 210. As previously described, the content call 210, m ms embodiment, contains e sips&fe end a 
eub& certificate such thai ths eser manager 320 can use the public certificate to authenticate tha sender s«d the 
create? el the coatsnt sail 210. Proceeding ts state 1040, the user manager 320 attempts t» locate a license far the 
content cell 210. if a tlsause Is i'ecated la state 10S0, than tha process proceeds to and state 1080 and moves to 

28 state 870 wherein the user manager 320 invokes the sppiicetiee with the content, it however, the license is mi 
leeetad, then, ths process pracaeds ta state 1 070 wherefe the user manager 320 stores the content ceil Wormat ien la 
the content database 334 and proceeds to state 1080 in which the user computer I IS revests a Ifeease. k one 
smhaolnisnt, the ussr manager 320 directs tha user's hmwser 310 to send a license; repest te the «&etast esanaier 
124 ssd proceeds te the end stats 1080. 

28 0. Offer ^Saasgar Sends license 

The Oowchsft carreaperiding ta stele 888. wherein tha offer marmgar 122 set«f$ the llceese to the eoer 
competer 1 15 is iestrated m Flprs 1 1 Begineing at the start state 800, ths urecess. item proceeds ta stste- 1 110 
wherein ths offer msaager 122 receives a licsasa regaest and eroeeeds to state 1120 wherein the sffer msaager 122 
has ttse aser eoaaslate license Issaancs rsqairsmsats via ths user's erewssf 310. Fer sxeaiple, the user ma? have te 

30 suhnst mpstrstsen irsfermstlae, mailing Infam^tiOfis fi8 oat a fsastieanairej submit sradii card ififormatien, and so 
fsrth. A sample registration form msv Inelada requests •fertnlorr«8'fe such as: first naaie, lest came f e-a®l atldrecs, 
comsaeVt eradlt card type,, ereelt card npmhar, sxpiratioa date, naeie en credit csrd, hslhia sddress, dty, state, zip 
carle, soantry, passward, and se forth. Proceeding is state 11 SO, if tise user dees not compters ths repiremsats, theo 
the process proceeds to ths sna" state 1 140. it however, the asar dees essnplete tha rapirsnieets, thee ths process 
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proceeds te state 1150 wherein tag- vm manager 320 begins to build %® fanae eel 220, After the liseese resnagar 
S30 hoiis the license eel! 220, the process greseads io state 1 160 wherein the offer manager 122 may "charge" the 
am computer 1 1 § far the tense. This charging takes pises, far' exarngis, if tfse tense issuance repair emssl Impeded 
»«& type si monetary payment % cmdit card sr ate aseayat information. It is rggepsxad thst in ether 
5 ambadinigsta, the feilag transactions jnay hs -processed by esate module sach as a service provider, a senref,. ami so 
forth, Preeaedfen is stats 1170, tits offer manager 122 then sends the license est 220 tg tha user's kowssr 310 asd 
proceeds te the end state 1 ISO, 

E. User Computer locates License And gearest 

The flwctiart ^responding ts stats 880 wherein the use? ccmpater 1 1S laeatss the sentsrrt and license Is 
10 iastrated m Fipre 12. Beginning in t&e start sate 880, the prows proceeds te state 1210 wteela tNs user's 
erswsar 310 receives ths Issnse aa! 228 and passes the license ceil 220 ttt the. user manager 320. Is state 1220, the 
aser member 320 opens the license sal! 220 and thee proceeds to state 1230 therein the user manager 320 verifies, 
tee sttthenMy of the limm calf 220, As fHestousfy described, tha license ceS 220, in me mim$mm\i, costal a 
sigeatare aari 'public m f ifleate seeh thai ihs am mesaae* 320 ess am the lieeasa eel 220 te authaatfcsta the sender 
IS and crester' of the licanse mil 220, Proceeding is sfste 1240- the t» manager 320 stares the license cell 
Information is the aser computer US. te sn« emaediment ffee license manager 530 stares the ifcenss call infbftnaiian 
m the Mm® database 332, 0 is resagnfeed that, in ether estaJimants, ate methods af storage msy be used. 
Proceeding Is stale 1250, the process verifies -whether the user still wants a license, i! the nsar's response is ne, tnm 
the process prsceads te the and ststa 12SS, Otherwise if the user radicates iM if®- asm still warts a license, then 
20 the process preceeds ts state 1 280, wherein the um sereputer 1 1 8 wspesis a lissase mi praceesls ta state 1 270 
Kfostwi tha user computer 11 § finds tas iiceasa eiiri precees's te stats 1280, k ststa 1280, the sssr eoopiter US 
finds the cent ant and than pracssds ts tfsg aad state 1 200, 

F, User Msnsgar laveksss Appiieatjoe 

Oace tfse osar 'manspr 320 has ths iieesse aad ihs eantest the aser manager 320, in stats 320, itivakas the 
2S anfjrannats applcstien with tha feriassterl content and proceeds ta tlie esd state 880, The um manapr 320 ailaws 
the spprepriata -access ts csntsntaecardisg ta the terms of the miss, for sxsmnk, if the rsqsestss' content was s 
sssg la M?3 format arid the miss aisled the user campler 11S ta play the first 20 secenda ai the aasg, tlra nset 
manesar 320 weald iswelsa m M?§ plaver m the user aaftspatsr 1 18 with the faajassted'sosg and slfsvs tte song to 
pfsy far 20 secands. The rales may slfew fer varyir^ types of sesess to ceatent seen as viewlag s psrtisa ef tlie 
38 - ssatsst, wwtm the satire sentsnt, coaylsp a portion of the eentaaf, spying tha antira cnntnnt, printing a portian sf 
the eantant, prsating one fell cop? ef the entire content, prints^ twa fail espies. af the eatirs content and so forth, 
S, Other Embodiments 

While sea embodiment aiiews the cpateat ts ha requested before a iicensa is created, it is reespfcad that la 
other ambedsmants the license eaaid he greeted asdiar reaaested feefers the oaetent is created sadler rsqeastsd. Per 
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sxsmeia, a aw esuid purshsss a license fer a sufescriptioa to all new articles pqbSshed la a specifis- pnolieatien. The 
oser would resists a tew far cantarit tissf may est have basis created. &fer88¥«r t it is recegsfces" that a single piece 
el esfiterrt ceuld fee related ts era 1 « more llssssss aad a stogie license csn^d sarraspond to ens or mere pisses sf 
content 

§ In ens emboalnispl tfce esetsrrt manager 124 may also send ths as®- a cosiest facettet? sell The content 

toiian sell provides the user with mfermetfon an vvhem the content is toted. The user may stl eeed Is receive a 
eerstent call 210 when teaser Is ready to access the content. For .example, a eser may ward to a video tile af a 
tws km rasvk Rather tfcaa sand Ihe soSre pfacs of content to the user, a license oiaaapmsat system mndeia, such 
ss tne content msoaasr 124. rosy send the user s content Iseatisa ssii pdfja the oser access to the location of the 

18 regfiested cesaant 

Tiro ■ content lssatis;n call may be similar to a content ail, to contains m encrypted content location, such as 
a UBL, tathar than the esntsnt itself . The content location esli may he au$s by the content matiasjer 124 ar arioirss? 
module. Qnsa tha as®- receives the content location sail, the osw may recast a license to gale access to the esntent 
tailors, After the user receives a license to access the csnterst location, the oser rosy gain assess ts tha content 
IS lecatisa. With this access the use? my, tor example, be aisle ts see a snapshot sf a pises sf content, access 
sdserf laing rrsaterisi, am! so faith. The mm may thee repest access ta tha content itself snd t if reuaSred, request tha 
appreciate iieonse. 
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¥, fislliaiThj. Ml?. 

fjgaras 13 ana" 14 illustrate eaa empsdia®fd for hollaing content ceils 210 ans* license calls 228. As 
prs^susly discussed, ft is recop&ed that in ether etr^imests, other modules eaeil held the cells sns'ior the sells 
seals* he built asstg other techtaqoes. 
25 A, Boiling The Content Cell 

A flowchart corresponding ta one embodiment sf haloing ef tho content sell 21 0 is illustrates! In Fiprs 1 3, 
In the start state S20, the ureesss proceeds ta state 1310 wherein the content manager 124 extracts fee rales 812, 
As prsvfsasiy discussed, the mles 612 tel shot types of licenses andfar ussrscan access wines types sf cists anil 
what Is reared for acsesstotj the tmimt Tha rules 61 2 may he stored In 8 miss database or they may ha listed as a 
M text stomas* srsdlsr progfans wherain the eeatsm maoagsf 124 can decipher ami detsmins whlsh rales S12 apply te 
tha seiested pisca ef sootspt, 

Frsesading te state 1320, the content manager 124 ohtsias mtm% worn tha centsnt database 438, in aoa 
ambodimerrt, sli sf ttso esatent is stored in soe datsfaase aosl the esetsnt raassgar 124 tm snatch the detaease and 
retrieve tha raqrisstarJ content. 
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Freeeedlp to state 1330, tha content esaaagsr 124 then emrynis the content The encryption l&sh-nkp} 
may ase a sariety of techniques' wel kwmn m the art Hawevsr, as pravtousfy discussed, in ens embedlrnent the 
content manapr 124 eaeryprs the content asing § symmetric- hoy and then encrypts ths symmetric key vsslh ths offer 
f^affsgsi's polio key. When ths encrypted smtmt 814 and encrypted symmetric key are sent te ths user campcter 
8 11 S, ths user eamjsttsr 115 cannot decrypt the content and cannot decrypt the symmetry key until H has the 
appropriate JfeeRSO, 

Preseedssg to stats 13^0, ths content manager 124 creates the self header 818. Ths eel header 818 may 
include Information saeh as a ^riqye identifier far the piece, of content, the stem from which tilts cement was derived, 
descriptive text, information ascot aspiration, as watt as ethsr mierfliatian. 

10 Proseesirsg is stats 13S0, ths content manager 124 than asMs the extracted miss 812, tits encrypted 

costaRf. 814, call header 618, as vysl as its own phlle certificate 018 to the content cell 210, in state 1380, the 
swtmt manager 124 "sips" ths content cell 210, As previously discussed, the module that sips the contest call 
210 vmt also include that meflWs pMs certificate m tha call. Thus, m stats 1350, the csnrant manager 124 
instedes Its phis certificate so that ths recipient can verity that ths content emse-pr 124 Was the sm whs seat and 

IS created the intent ee8 210. Mtsr the content manager 124 sips the content call 210, the process proceeds to tha 
end state 1370. 

8, Sailing Ths license Gel 

A flowchart ceimpondlns, to ene eaisedtmsnt sl : nodding of ths license cell 220 is imtrafsrf at fiprg 14, Is 
the start state 1 1 58, ths prams process to stats 1410 >Mbgfaiirths license manager §30 extracts ths miss 712, As 
28 prwkwsiy. discussed, ths r#as 712 tall what types of Ifcanses.andfsr esarx can access varioas types, sf data and what 
is fsjpraa" far accessing tha mtimi The miss 712 may he stored in a rides database ar they may as listed as s text 
dacootsnt and/sr program wherein ths license manager §38 cars decipher and determine which roles 712 apply. 

Proceeding re state' 1420, the license manager 530 creates a license. Proceeding to stats 1430, the license' 
manager 530 thsn ensrypts ths license. Ths ersgfyptian teehniiiaa may ase a variety a! techri^ees well kmm in the 
2S art, Hewow, ss pmvseasiy discussed, §no eo^stleieat tha iieease jrsarssger S30 encrypts the lleastsa asfeg a 
symmetrle key and thas encrypts ths spanstrlc kay with the user's pable key, Whsa the enetyptOEl Icanse 714 smi 
encrypted symetctrie key ate serst to the user compter IIS, the user compter 1 15 can decrypt the feme. 

Proceeding tc stats 1440, tha ftcersso ftianepr 630 creates ths cell heads? 711. The celt Mader 718 shay 
iijicleds iofarmatlssi sush as a anspe idsetitler for ths heaase cat!, aniayg ideritife 'far reiatsd assess ef esetsnt, ths 
38 stem from which the cootsnt was derived; desenptiifi tmt, infarmstioa ahont expiratloa, ss vssl as cthsr kformatiaa. 

Proceeds! to state 14S0, the gsesse msnager §3S then adds the extracted rates 712, ths encrypted llcease 
714, cell header 718- as wel ss its swn pohlie certiffcate 718 te the leanss cali 220, in state 1488, the license 
msesgar 530 "signs" tha tense esil 220. As pretssosiy discassed, the module that signs the llesnss sell 220 mast 
also winds that medcis's pehiic certlflcste In the ssii, Thas, in stats 1480, tha license manager S30 Mndes Its 

?1 



public esftsfkaie so that 'the recipient mi mify/ihstih® leesss mss^pr 530 m$ the- $m who sent sad great®! the 
license ceil 220. After tiso lisooso mansgsr §38 signs the license call 220, the proeass process to ti?s sral state 
1470, 

la oss embadirsertf, ths i\mm manager £39 a?ay stars a copy of the tase eeS Mormstton a licesse 
§ tetes 547 for later tracking the teed license, 



While certain preferred dWwoU ef the jRseatisf} raws been fecstei, these srasmisfaeBts have seers 
presented hy way ef example eery, mi sre not irrtenfferJ to %mt the sesps of the present ir^gse'oa. Accnr#ipjy, the 
10 hrssdirs and scops sf the peseel ii«?8atrori sisoiihl he defined only in aceordsfice with the feliewsrsfj tiam thsk 
espvsissts. 
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Activated Fwids Ta fale 

Registers every successful HesiaCefttar installation by a user. An activated Prsrnew 
assigned to every user. Currently., there is a one-to-one relationship between a us 
an activated Fn-smswoTk, Plans exist to change this relationship, §o that One user c 
many activated Frameworks. 

Before a framework- is. activated, it needs to first be pending. At activation time,, a 
information for 3 .Framework in lh& Pendingnwkls tabia Is copied into the Activated 
table. At this point, lbs oaekend can tell who the user is and which Framework >s b 
used. 




Field Descriptions 
Tim ©Stamp 

Date and time whfcn & Frsmsvvorfc wbs activated. 
Fra mewofkid 

Framework Unique loenb'far h*id.0O0.LOO.OS$0110X>< At this time, one Fram 
corresponds to om User Account id; plans exist to allow a User Account :t4 to have 
active Framework Ids, 

CsliXd 

Character string that uniquely identifies a Framework Id Call. Every Cell, including 
Framework Id Ceds^ Contract C<ssi$ f and Content Ceils, has a unique M, 

Fnish 

Small account provided by 3 Us&r at the time MedlsCentsr v<as installed, 
Requested 

verifies which Frame work it's corning Stern; presides ' : -:< v ra security ;i.e. ; if sackend 
i1'le://F;VXcchnk3} Publicists wrrCrW pocuasasJsMatncset t>«cymesnabc-.--VVhv;nsd Sivids.hisn 52/22/93 
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WO 01/583.19 



AsSivslsaFwlds Table Page S.efX 



respond. It will try to activate and sends request Id*, used to prevent hackers). 

User-Host 

Mo tender used, 

EemoteHast 
Ho longer used'. 

AuthentS catlo n 

Boolean- value., false indicates that the Email address has not been authenticated, 
indicates the user has received the bsckend's confirmation cmal? and has clicked o 
Sink to complete the- registration. This process authenticates^ or verifies, that the £ 
address is legitimate, oecsuss the hsckend knows that the user actually received t 
Brsast 

UsstAccotmtld 

Same as User. 

a Her Through 

When the Framework- Id expires (&.g. ;f six: month's, one yesr, etc<). 



M&if'/F:\T$!ihnte4'} Psb}lcasio8$*FW 0tm«n^8s\tntrwej Do-c;53msRtehs..AAe;bfi!«^Fsvi<5<;.iitsji 
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WO 01/583.19 



Adfftin:s:;;raw« Tabic 

Administrators Table 



Contains the list of special users that are authorised to perform admlnlstradve task 
Administrators in this list have no relationship to Users. The Administrator logins a 
oriviieoeci HediaOMA employees and publishers to menage their Knowled^sStor da 




Field Descriptions 
Name 

f^me or login account for sn Administrator. 
Password 

Password to gain err j; to the Administrator account. 
Email 

fcmsil sddrsss of the Administrator, It allows electronic corn muni eat; on 
with the Administrator (i.e., sand reports, statistics, etc.). 

Phone 

Telephone number v/hsrs the Administrator can be contacted. 
PubUsherld 

Publicahons this Administrator is enhtied to menage. 
Type 

Defines this Administrator type. Currently only two types ejosts: Hegoiar 
end Super. A Regular Admin sstrstor can oniy work with the designated 
publisher and its respective publications. A Super Acini in istrstnr does not 
have this limitation. In other words, being a Super Administrator 
invalidates that Pyblisherld colymrs. Valid vaices for this column are R and 
S. 

Mana g eC© rpAcco un fcs 

Indicates If this Administrator is allowed to manege corporate accounts. 



f>te;#F;Vfi«x»»»ari Piir>i.(cs!iortsVT w DoKsosenrsVl^rasm Doc«;riest;!pon.. AAdmifiisJrafojslitHi ! 2/22/99 



A&ttfcristratsrs Tab ie Fag« Z <sf 



Indicates if this Administrator is allowed to manage promotions! gmafl. 



fi!fcr/:'F:Y"takssicsS. Ptib!ica;ioas\TW I^camcms^iratsss Oo;asra«flKt!O0..Mfe^us^;H:OTS.t«m 12/22/$$ 
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ArUcieSvnc Table 



? i I c^v ^% y fT 1-5 1 

Represents a queue for DOB (artsctes) to be updated on the Dynamics database, I 
purpose is to synchronize the DOI list sn the Dynamics database with the DDI list 
avails&le on the KnowiedgsStor database. 
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Field Descriptions 



Doi of en article that needs to be synchronized. 
Opera tkso 

Describes what to do to synchronies an article, between databases. 
Currently, two operations are af lowed; create and update, Valid values 
are C and U, 

Status 

Describes the status -of the' operation. Three values are Oehned; pending, 
in process, and error, Valid values are P f I, and E 

ErrorS ea son 

if an error occurs during synchronisation, the Status is set to £ and the 
error message is stored in this field. 
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WO 01/583.19 



EiUsbicSBesDSncs Tabk Page 1 of 3 

BHIabteSum m a n es Tab I & 



lists s condensed summary of als transactions mads by a particular Framework (U 
the bjiisnsj inforrnstion to~- that account. One <snfcry rsfiscts the total of ma ay inciivid 
transactions in the SRiabieTmnsections tabie. 




Field Descriptions 
Trarisactionld 

Uniquely identifies a batch 4f transactions (one or rosny) for a user. 
TimeStamp 

Date and time when the transaction oc<:yrre.d- 



AccotintXd 

User performing the (ransschon. 
^irstName 

Firs!: name of the User. 



?Vk-//f ! :\Tetfe-!i-^f FvifeiicaiiossVIW Dociarcm^UautK &oa;avs.s«>?a..ABjlfeblcSt»K>r!mas.ktm 17/22/9$ 
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Last name of the User, 
Company 

Company of the Us«r. This Held might be null 
Email 

Email address of the User. 
AccauritStatus 

Defines the status of the User account A User account can be Inactive (0) 
or can belong to a guest {!}, a member(2} or a group member (3), Also, 
st can be disabled (4). 

Se rvice Leva! 

Intended for future use, to provide for sny number of different isyels of 
service provided to users (e<g, f "goid, ,( ''silver," "eilte/' stc). Currently 
there are only two levels; Guest and Member. 

H s m e F or B 1 1 i i rs g 

Name used in biffins operations for tbis User, 

BtlllnyAcldressi 
Billing address field #1. 

BslbngAddfessS 
Biiiino address field #2. 

City 

City for biding. 
Stats 

State for blUlng. 

Po stal Code 

Postal code for billing. 

Country 

Country for biiiinib 
GardType 

Credit card type used for billing (e,o, f Visa, MasterCard, etc,), 
E rs crypt«d Ca rd His m ber 

Sncfypteci credit card number. It Is encrypted for security reasons, 
F.nerypt!onType 

Type of aorrypriDn used to encrypt the credit card number. Available 
fifc://F:\rs«lmlca3 :Publivati«;isVIW Doc-mac^tsXTntratsci Do«ujiic^a..A»iIi8bl«S»n-!xnBxis;s.^r« 1 2/22/99 
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B iKahlfiSttrawsries. Table Fs5 S« 3 »H 



types are Bask {!}, RSA (2), and SirrspisBasN (3). 

CarcIExplrafclonMonth 
Credit card expiration month. 

Cs rdSsepi rati o nYear 

Credit csrd expiration year. 

CoUfitOfTransactlons 

Number of transactions grouped in this summary. 
Amount 

Amount in doilsrs for the grouped fcransadtens-infco this summary. 
Comment 

Gen#a:! comments Held. Almost never used. 
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BiliableTransactions Table 

Lists Individual billable transactions that occurred or> KnowieogeStor. One transact 
occurs each tinv;; a contract ss issued. 



F $ eJ d D esc r s p Is o rs s 

Identifies hhe transaction as part or a batch of transactions fee ens User, 
Tlns-hStamp 

Date and time when the entry to this taole was made, Generally, this is 
the time v»'hsn the user encountered the "paymsnS" page and authorized 
charges to a credit card. 

Tr arts-Time 

Date and time when ens transaction took piece; this may be hours, days, 
or weeks prior to the TlmeStarnp. Generally,, it is the time when the user 
purchased each document 

Description 

Describes what the transaction was for. It usually contains the tiHs of the 
article purchased or informs about Introductory credits. 

Do* 

Article involved in the transaction. 
AceourrtXd 

User me king the transaction. 
P ram a wo r k Id 
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FrsfTseworkid identification number used by the User. 
Publication^ 

Publicadon ihe artide belongs to. 
TrsnsType 

Transaction type- identified by a ftumfcer. The valid types are Used 
Introductory crsdH. Purchai* (2), and Summery (3). 

Amount 

Amount in US dollars involved in this transaction. 
Comment 

Genera i comments about th» transaction. UsuaNy this -field is null. 



S\1^yr;Vlflchfucsl Public&tfe»w\TW 0eciivne^3\TntrariBt Do«^e«..ABlS;sbSe'rtass^doi-s.hijri 13/22/99 
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UtckTbteughft TsMe Page I of ! 



ClickThroughs Table 

Keeps track of each time a user dicks; on KnowiedgeStsr to get to a published web 




Field Descriptions 
TimeStamp 

Date and hme when the dick through occurred. 
Prameworkld 

framework that did the ciiek through. This is later tracked to the User 
using this Framework, 

PubilcatlonCode 

Publication in which the User completed the click through. 



fst«://F:\Tc:cbnic.al PubiieatkwwSTW Dwemer»u\inK«R« DocysasntaUon..AOk5c'ns£»«ghs.Hts5i 17/33/99 
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Co!i!;;iCtSt»U Table 



Fags I o! 1 



Contra ctSt a ts Table 

When the back&nd is turned off. but before exiting, it lags the number of contracts 
and Ht R< averace time it took to issue each one. These records are kept here. This 
not have a direct relationship with any other cable in ihs hackend Stor database, ! 
for debugging and system monitoring. 



Field Descriptions 
TsmeStamp 

Date and time when the backend finished axeeution. 
N umfeer Contracts 

Number or contracts created (issued) fey me backend from the dme it was, 
iast mittsih:ed to the time when it was gracefully taksr* down. 

Average time for crsatind <- contract. This value is used to monitor the 
performance of the contract creation code. 

Comment . 

General comments, UsueBy shows a massage teliing tnat the bacKono \s 

.finishing execution. 



hte^/'r^Tedyuca] PiAhcsdotisYTW l>oc«xB«ni$MsiK>««i t>p^vi}«;«stioa\. < -\C<s^u-3cxS58ts^h.tfn 1 2r.£2/9v 
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CreditCardNumbers Table 



Holds s'n encrypted version of one credit card number for each user. The encrypts 
the credit card number is also specified, 




Field Descriptions 
UserAccoontld 

Identifies the account this card number is good for. 
& n crypt j on Type 

Method used to encrypt credit card number. Available types ara Sssic (1), 
RSA (2), and StmplsHssh (3). 

Encry ptedCa rd Number 
Encrypted credit card number. 



S3e;//F:Vr«5hnic&i PabSicaslcjasVTW Docwmwis^aane* Document.^vC^^CsraHtmtbsT^tjn 12/22/99 



CutT««tTfa5$sseti«as Tabic 



Current"!* ransactfons Table 

Saves Information related to transactions. An entry to the Ct»TsntlYansactlons tsb 
made for each contract. An entry cm be a debit or credit one? : these, entries may be 
purged. Each rims a user buys an article, you get an IssusdConctaet entry and a 
CnrrentTransaetion entry. 
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Descriptions 



TsrneSta mp 

Date and time when the transaction occurred. 
Description 

Describes what the transaction was for, It usuoily contains the tiUe of th.« 
article purchased or informs about introductory credits (l.o. : if transaction 
type is purchase, the name of the article is entered). 

Article involved In the transaction. 

Aceoimtld 
Identifies user, 

FrsrneworkXd 

Identifies which Framework Id is responsible for handling this transection, 
PuMkafciorasS 

Identifies the publication of the involved artlcis. 
TransType 

Transaction type identified oy a number, The valid types are Unused (8), 
Introductory credit (.1), Purchase (2), and Summary (3). 



fsS«//F:\7ccht3tc«tl PtsbiicationstFW Doeursic-vmlarre^n^^ 12/22/99 
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Amount 

Amount in US doBars for this transaction. 



Comment 

General comments field. 



^Technical PublicatiotiSXTW Docummis\T«traw5 Docysafflsu.ACwveajTxaasactio^s.htm 12/22/99 
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DOIs Table 



Pafis? I of 2 



Acrnpipnodates article-related information, An article is also known as a DO!. Ever 
represents an available DO! In the KnowiedgeSton This table is an article inventor 
contains 3li articles a User would access, ail Content Cells, and more. This table is. 
the naming servlat. 
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Field Descriptions 
Tim ©Stamp 

Date and dms -a D01 was registered- 
Title 

Title of the articles 
PubUcatfonXd 

Publication identification number this DOT belongs to. 
Publisherld 

Publisher Identification number this DO I belongs to. 
Or! 

Address where article ceil is located (e.g., 

file : ///cl : Yd ata D Irectory \cei is\com .. cs d earn net.j3d.,„G 1 8„Q lj> 1 . mdna } , 
Price 

Amount in US dollars that this article Is pnesd at. 
ValidFrcm 

Indicates when this 001 can first be accessed. Limits access to artides, 
VelidThroogl-s 

Indicates when this DOT can be accessed until. Limits access to articles. 
fxle^/P:\T«chiiicai PsbiicsdoissYTW PocomeBtsAIntrawn DQ } c«Trseni3?ion>J3atabasc..ADQlslitKi 12/22/99 
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DOis Tsbfe 



iSSSSS^ft cz\\ Mantir.ed by this DOI is a Content Calk Values are 
True(l} or Faise(G), 



fite^FrSI'cchatcal PaUicarsossHTW $K>mrxnmis<lxwmv. D«w«s««««ios^siabas«...\DOIs: fcfcm $ 2«2;?9 



41 

SUBSTITUTE SHEET {RULE 28) 



BjwaiTHwtiay tablfi 



i Of i 



EmallHIstory Table 

Kssps track of Emails sent to particular Osars. The date when the Eroal! wsss sent a 
rerrpiate usee -b ?i\zo r'-cord-vd. 
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Field Descriptions 
TamplateXd 

Srnaii template used. Foreign key to E-rnatlTernplates/TempJateid . 
OateSsrtt 

Date when the EroaU was ser»t> 

ToHeadsr ... . , . 

S^naH accounts to which the groaii was s&nt The U$<sr csn moosry cnts 
<!3t3 In their customer profile, so we score the address that actually 



y r Accou ntXti 

User receiving the Email, Foreign key to ussrs.Accoumld. 



fMetf/FATectmfeal PaWkatiORSVTW Docx|m£nu\fetai»et Do«i«nsiSati«RV,,\Es«as!HisSoxy,!;t-m 
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EmaiSTi;$xpliS.t«s Table 



ag« i Oi 



EmailTernplates Table 

This table houses the collection of templates the system can use to generate Ernst 
messages. To generate an Fma;! me:;ssge ; me system ts-kes the From Header.. 
SubSectHesder, end Body (rant ths database entry and uses than to buiid the m 
Templates ars either owned by a specific publisher or by the system. 
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Field Descriptions 

Uniquely Identifies template by this number, 
PuMlsherXd 

Publisher that owns this template. Pubirshexki of 0 (zero) Indicates a 
system template. 

Name 

Hams of this template; this name is unique among all templates. owned 
by this publisher, 

CreationDate 

Date when the template was created, 
Su hjee tB esd ar 

Subject line when sending an Small with this template, 
FromHeader 

Defines the FromHeader for Emaiis sent using this template, 
sody 

Contents of the Email using this template.. 
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ErfotLsgDoi Table 



Records Doi-relstecl errors. The date when & occurred, the type of error, the Pram 
{User) to whom it was issued, and the attempted Do ! > are pact of this tag. 
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Field Descriptions 
Time Stamp 

Date and time when the error v*as togged. 
ErrorN umber 

error number describing the failure. Common Do! errors are a mi$s?ng Oct 
{101} or unresolved Do; (K)2), 

Dos 

Intiindisd access to this artide caused so errDr, 
^rameworkXd 

Framework: requesting the fasiing ertkJe, 
Re-noteAddr 

Remote IP address to wfrich the Dos error wss Jssysd, 
RemcsteHost 

Remote host n$rns to which th-e Oof error was issued. 
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EroriLogFiKd Table 1 « f 1 




Records Frarneworkld- related errors. The date when it occurred, the type of error, 
Framework (User) to whom ft was issued, end the attempted Dei are part of this so 




Field Descriptions 
Transactionld 

Unique transaction number idgntsfylrig the error. 
TlmeStamp 

Date and time when the error wes logged. 
ErrotHumber 

Number describing the error. Possible errors indude fwld missing (2001), 
in bad format (20.02), unregistered (2003), no account found (2004), not 
activated (20GS), and expired (2006). 

Frarneworkld 

Framework involved in the error. 
Dos 

Doi Involved In the error, 
RernoteAddr 

User IP address involved in the error, 
RemoteHosfc 

User host name involved in the error. 

gxtraText 

General comments. 
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Plaid Descriptions 
Tim ©Stamp 

'Date and time when the error was logged. 
Frameworkld 

Framework involved in the error, 
CeOId 

Character string which uniquely identifies the Framework Id Ceil 
experiencing the error. Every C<&\\, including Framework KS -cells, Contract 
Cells, and Content Cells, has a unique Id. 

Expires 

Time when the Framework Id Ceil is to expire. 
User-Host: 

Column will no longer be used. 

Requestld 

Request number. 

Re mote Add r 

User IP sddrass. 

RemoteHost 

Column wilt no longer he used. 



F r a m ew o r k Re i n s ta 1 1 s Table 

Counts the number of Framework reinstalls attempted by a User, and the; new Fram 
identification number assigned after each successful reinstall. 



Field Descriptions 
TimeStamp 

Date when s Framework- reinstall was logged. 
Frameworkld 

Framework. previously installed, 
InstFwid 

Reinstall Framework. 
ChalnLength 

Number of Framework reinstalls attempted by the User, When the count 
reaches a predefined limit, no more reinstalls era allowed for the User, 

Rerooteliser 

Column will no longer be used. 
Re.moteAddr 

IP address of the user reinstalling a Framework. 
Ra motel-test 

Host name of the user reinstalling a Framework, 



iSUe://P:STechnk»l PubWcstSoasVi'W DocuHscrtlsKfotraSc? D»cuVn«..:^'rM»cs*orkK«mstalls,btTn 12/22/9!? 




47 

SUBSTITUTE SHEET (RULE 26) 



F wi c! C a 1 i I d N u m b e r G e n e ret t o r Ta b I e 

This is the mechanism by which unique ceil numbers are created. Keeps track of a 
Cell Id number; This table does not have a direct relationship with any other table 
haeksnd KnowledgeStor database. 




Field Description 
MextCelliclNumber 

Keeps track of the next cell Identification number, 
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GroupPubiications Table 

Identifies which publications csn be accessed by any of the User Group members. 




Field Descriptions 

Groupie? 

Group Identification number, 
PublicationXd 

Publication identification number. 
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roups Tabic 



Page J of i 



Groups Table 

Maintains qroup-reistcd information. Groups sre used to accomplish corporate sec 
users can be consolidated into a single account using corporate accounts. 
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Field Descriptions 
Groupld 

Group idaTPficstson number. This number is unique, 
Name 

Name of the group. 
Password 

Access password for accounts under this group. 
Type 

Tvoe of vciijp qroup accounts. Allowed group accounts are osrno accounts: 
O, and standard accounts: S. Users in s demo account can be promoted 
to a standard account if respective group account tees are paid. 

UserTTL 

Number of days group accounts will be valid for this group. 
FubHeationld 

WbHcatton members of this group have access to. 
£xpi res 

ExpiratiOo date for this group account. 
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Field Descriptions 
£5 roup Id 

Group iclentsfi cation number. 
0 se r Ace® u st 1 X d 

User account identification number. 
Expires 

Data whsn this Group account expires for this User. 
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Records every contract issued to a particular user wften g«sUn§ an articles. One ml 
made for every contract issued to s Framework (one contract for oacn article Issue 
These entries are kept psrroaritgntiy scs a user won't be. charged again for download 
ssma srtide,. 



Fleld Descriptions. 

Transaction^ 

•Unique number and identity for rnis transaction for auditing, 
TIm«Stafrjp 

Dote and time wfc&r> this transaction was; registered. 
Do! 

Tells which article is for tms contract 
Contracttirl 

Identifies where the Contract CaH is located. (The Contact Cell is 
discarded after a while to keep too disk dean.) 

Ceitfd 

Character string yfhtch uniquely identifies the Contract Celt. Every Cell 
inde-dlng Fraroework id Csih;, Contract Ceils, and Content Ceils, has a 
unique Id. 

Frameworkld 

Framework Id has permission to access tne Ceil identified by the Del, 
Pobiicationld 

Tells vvdicb publication the Dei in this contract belongs to. 




A;v,ount 
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JssaedConitacJs Tabic 
Amount User was charged; used for debugging and tracking. 
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OsiwcSxibscnpt!o?sD«r» Tabic 



O n H n eS u fo scr i pti o n Def s Ta fo I e 

Contains avaSiabk: definitions for oniine subset prions managed by KnowledgeStor. 




Field Descriptions 
Description 

Describes the characteristics of an oniine subscripts dp. , 
pyfelicatsonld 

Publication that supports online subscription. 
Price 

Price tor the onfira* suoscrspHon tor this publication under this description, 
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PendingFwids Table 



Lists ail f rameworks pending, A pending Framework usually halonos to a guest Use 
a Pending Pwiri is activated, its entry is "moved* from this table to the ActivatedFwi 



Field Descriptions 

Cellld 

Character string which uniquely identifies trie Framework id Call Every 
CeF f including Framework Id Cells., Contract Ceiis, and Content CsHs, has 
s unique id, 

FramesworkXd 
Frsn^swork pending, 

Small 

EiTsasJ of the guest User with a pending F rtiroevvork, 
ValldThrough 

Date this pending Framework wi\\ be valid until 
User.4ecotsrvO:d 

User account: holding this pending Framework, 
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Page 1 on 



Rgqisters properties and characteristics of each profnotionai Smaii -a variable on the 
back end. 




Field Descriptions 
Publicatlonld 

Publication invoked in this prcmottooaf &T:3iS. 
Tempfateld 

Tsrnpiste used for Shis promotions! EmaiL 
Enabled 

TeKs if this promotions; Erosil is enaDSod 
Date when this promotional Small was «nsbi«d. 
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Publics! totss Table Bags 1 of 2 

Publications Table 



Has information of every publication on the KnaxvledgeStor. One publication may c 
rosny articles or DDIs.. 




Field Descriptions 
PuhiieationXd 

Unique number for each publication, Identifies a publication internally, 
Status 

Status of a publication can be ".active" or 'Inactive/' 
Pubi; ca tionCode 

Short code to identify a publication; usually it Is a three-letter coda (e.g., 
csn, o\r f or cad). 

Resource Fiie 

Points to a fife where this publication's properties are found (e.g... 
o;\back\propert!es\ATContsntCeii«prpperties) ! 

PublisherSd 

P'Ubilsihor to which this publication beiones to. 
Domain 

Publisher domain for this publication (e.g., cqro.qSnews, rorrrcadesrnneb 
etc). 

Nome 
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PwbHc&tioxss TaMe P&ge 2 of 2 

Nirrvu or the publication. 
Conte n tC'el! Sxtenss on 

C&n format for the content of U\»s pubHcstion (e<§., NOMA.. XDMA). 
UrSHornePisgo 

Web address for this publication (e>g v 
IntroCredft 

Introductory credit given to users accessing articles from tfcts publication. 
The amount is ir> US dollars; 

DefsultPHce 

Default price for articles of this publication. The amount is in US dollars. 
Free Articles 

Number of free articles given to users. 
PermstPnotsng 

Indicates if printing is permitted for artieies of this pyisiication, Valid 
values are True (i) or False (0). 

£* e r m i t C o p y I n g 

Indicates if copying is permitted for articles of tftis Duplication. Vs iid 
values are True (1) or Falsa (0).. 
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Publishers Table 



Contains information from ever/ publisher that has content in KnowSedgsStor, One 
publisher may have many publications. 




Field Descriptions 
Pubflsherld 

Publisher's unique identification number. 
Status 

Status of a publication can be "active" or 'Inactive," 

Publisher name. 
Defaulter see 

Default price for articles of this publisher. The amount Is in US dollars. 
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Tra n sactlo n N u mb er <3es nerato r Ta Me 

This Is the rnecbemsro by whfc-h unique transaction id numbers sre created. Keeps 
unique trensscfion id number. This table does not have a direct relationship with a 
tabis in the KnowledgeStor database. 




Field D&scdptiori 

N ex XT m n sa ctt on N u m fee r 
.Holds the next transaction number. 
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U*ttB«J*«c** Table 
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serBa lances Table 



Keeps a record of a User's credit and charges for s specific, publication, series exts 
publication a User has accessed. 



Field Descriptions 

UserAccountld 

User accessing an article. 

Fublicatlotild 

Publication that th<8 article being accessed belongs hx 
TSmeCredifcCreated 

Date and time when credit was created far this User on articles from this 
publication, 

AvaitabfaCreciit 

Amount of avsilabie credit in US dollars . 
CredltApplied 

Amount of credit applied in US doifers . 
CurrentClwges 

Amount of curmnfe charges in US dollars for this user on artidss from this 
publication, 

HaveShownPric'sng'Ferms 

Indicates if a User has seen the terms and conditions for articles of this 
publication. Valid values are True (i) t?r raise (0). 
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Xte&Cmmv&s Table 

UserCom merits Table 



Holds comments made for each particular user, This table is used to sld in custom 
support. 




Fseld Descriptions 
UssrAccountSd 

User for which comments were registered. 



Date and time when the: commsrsts we^ registered. 
Comment 

Gsrssrsi comments for this User, 
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Usars 



Users Table 

Halntalns information for a User account in KnowiedgsStor, This information inciud 
address, account status, credits, and charges for every user. There *s one entry in 
for each User, Once a User does something that requests- a Framework Id number 
is r. rested and a Framework: Id number is sent. 



iai.::■.^^^^;«■ > «^iU•a^ ! ; 



vs«5w 



:oo 

3 
■> 

Si 

a 
; 

<& 

ICS 

so 

-tCJ- 

?c 
*t> 
*.6 
,2 
■!S 
£8 



>::■ 
s 

8 
{> 
0 

s 

is 
i-? 
n> 
s 
a 
i.V 
.0 
0 

a 
s 

"0 

s: 
r; 

a 
c 

*3 

> 
■'•5 

:» 

• 0 



a 
o 

3 
S. 
fi 
5 
S 

« 
■i 

5 

■:e 
a 
s 
s 

•3 



'<&> 
Of 



<» 



T-\txl d P c r i p tl o n r* 

Use r Acco untXd 
Identifies sach User, 

FiSrstName: 

First name of the User. 
Ls$tNams 

Last oarna of the User. 
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Users Tabl* 



Company 

Company of the User. This might be null. 
Email 

Email address of the User. 

Accoo m Cresti onDafce 

Date when this User account was created. 

A coots t * l:Si;a t u ss 

Status of this User account. A User account can be Inactive <0> or can 
belonq to a guest (1), a roember(2>. or a group member (3). it can also 
be disabled (4). A "guest" is ona who has not registered fully with 
K'nowledgeStor, A "member" has provided complete-Information including 
billing information. 

CurrentCHarges 

Current charges In US doners made to this User account, 
Current-Credits 

Available credit in US dollars for this User. 
Outsfcandin g U m*t 

The limit: thai: roust bo reached for a User to be asked to psy; can be set 
per User. 

Servicetevei 

Intended for future use, to provide for any number of different levels of 
service offered to users (e.g., "geldr" "silver/' "«ilte," etc.). Currently 
there are two Isvssis »- "Guest" and "Hamberr 

Fro motional Email 

Indicates If this User wants to (receive promotional Em'sils. Valid values 
are True (l) end False (G}> 

Rem ote User 

Column will no longer be used. 

RemofceAddr 
User's IP address, 

RemoteHost 

Column win no longer bo used. 

NameForSsllnig 
Name used for feffSlng. 
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lJs«fsT&bis Page 3 of 3 

Bills ng Ad d reset 

User billing address field #1. 

8 H 11 n g A d d r e ss2. 

User billing address field #2. 

City 

City of the user, 
State 

State of the User. 

Postal Code 

Postal code of the User, 

Country 

Country of the User. 

Password 
User password. 

Password EncryptlonType 
■ Type of encryption used to encrypt the User password- Available types 
are Basse (I)., RSA (2), and -SimpleHash {3}.. 

CartlType 

Type of credit card (e.g., visa, MasterCard, etc.). 
CardAccowntNomber 

Credit card number that is 'safe to -dispiay to the user, such as 
"xxxxxxxxxxxxiS 34, ,f 

Ca rd £x pi ratio n M onth 
Credit card expiration month. 

CardE-xpiralion Yea r 
Credit card expiration ydar. 
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UserSvr^ Table 



Pagel of l 



UserSync Table 

Rspressnts s queue For Users to be updated on the Dynamics database. Its main o 
is to synchronize the User list m the Dynamics database with the User Usfc available 
iCnGwiedgeStor dstabass. 



Fseid Descriptions 
User Accountld 

User account to synchronise In both database;;. 
Op«rat$«« 

Describes what to do when synchronising an article between databases. 
Currently two operations are flowed: Create and Update, Valid values 
are € sr.d U. 

Status 

Describes the status of the operation. Three values are defined: peodlro, 
in process, and error. Valid va'ues ere F, X f and 6. 

Srrorftaason 

If an error Is raised and ths status is marked with an £ ( sri- error oiessage 
will -appear here. 
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WHAT IS CLAMP IS: 

1 . A trusted ai granting asssss te a data ebjeet sampming: 

creating a data s-s-jee! sell; 

sending the data alpst eel! te a eorrpitmg ds«ies aver a network; 
5 creatine, a fem:g ehjest self related to the data eb|aet ceil; 

seitfefl the Ikaese object sell to the eetriosling device o«sr the network; and 

a/sntsno access ts the sista object eel based spars intormafc is the rested isease ehjest eel, 

2. The mated of Claim 1, aditfeaaSy csmprfslrsg receiving a user fgpssl far 8 data s&iect sell. 

3. Ths method ©f Claim 1, additional*/ eememmg receiving a user rsspasf for a license abject 

ID 4. Ths method of Claim 1 , Margin rjraatina assess to the data object eell deludes vsrifylog tfcat a license 

eajaet sal related te tits data elsiecf eel is located m the coaipatsng device. 

5. Ths mated si Claim 1, wherein ths data abject cell iadudes at toast a data centre! element sad s data 

abject 

8. The method at Clein? §, additionally comprising encryption at ieast the data abject 
1 8 ?, Tea meted at Claire 1, wherein at least a portion of tea Ibssse abject sell k encrypted, 

8, Tbs method of Claim 1, additionally somarisina;: 

retrieving a data location sell rsiated to the data object cell; 
sending the data foeatlsa caff te a samps-ties, tievfea ever s mimsk: 
granting sccesa ts ths data Sscatfss eel based apse Wermatfon in a rated iisssse sfejset eel 
20 8, A method of sparing access to a data object eofaprsslng: 

retrieving a data abject eels; 

sending ths data object eel! to a computing device mm a' network; 
retrimdog a license abject eell related to at least sm data abject ceil; 
sending the license object sal ta ths camputing dsvfce aver the network; and 
26 granting access to the data ehjset sal hased ape infcfm&riafj i» a related tase ehjest cell 

10, Ths matttad of Claim 9, additionally comprising receNng a assr request for a data abject sell, 

1 1, The methed of Claim 8 additionally eerepfising raceksig a w® request lets license abject 

12, The method of Claim 0, therein panting aeesss te te date object sell includes vemyina. that a license 
efejsct call related ta the data abjsss cell is located as' the- compytseg (levies, 

30 13. The method Si Claim 8, wherein the- data object cell includes et least s data control element and a data 



arjieet. 



14. The method af Cisim 13 additiansliy -cerspri^ aecryetotg at least the data object. 

1 5. The method af Claim § ; wherein at least a partlaa ef the tesss ahject eell is eocrypted, 
I B. Ths raathad sf Claim 8,. additionally ssraprising ereatieg: s date aajaet cell 
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17. The m&thod a? Claim 8, addrfieaaiiy csnfrising emtio® a abject ceil. 

13, The matfmd of Claire 9, wfras tha slats object ce8 ana' tha Bceasa ofcjosf eaS are misted by at feast 

Ofig Sj:3iipS ki88tif»r, 

18, A method of mansgmg dsts ejects, the oMfted cosrspf IslfJg; 

8 seedier s request ta s first sxanpeting device for a dais ebjsct; 

reeeivi^g a data ebjaet eel! related to the roqaestad data sbjaet tram she fto ecrajMing dstfieaj 
saaoletj a request to a sseamt sstnaatiap, device fsr a license object f eisted to the data efejsct eel 
receiving a foeosa object ceil tram the seeand eempting dawea that is rsted to the repeated 
iiesase ocjset; and 

1 8 pasting access to fbe data abject eel based en iafomistson is the related Icsase abject cell. 

20, The method af Claim 18, wherein the first confuting device sad tha second computing device arc ths 
same esmpetlng device. 

21 , A mathed es maaagifig data objects cenftisins,; 

reesjviaa. s t§qmt for a cists object frara a aatv«sk mis; 
t§ idsmSfylng.a data object call that is associated yyitN the reauestad dsta «*|ect? 

sending tin data object ceil to the netwetk nods wbefaifs access ts the dats object cell requires 3 
rthv-n; license abject call 

22, the method of Claim 21 f addftieaally eemprisieg: 

sseeasing a license object sal related to tfss data abject call; 
28 sendirsg the. license abject call to tft* network nade wharsia the \kmm object call grants access to 

si teest the dsts object cell 

23, A method of managing data objects comprising,: 

raceitdna a request for s license object fram s network node; 
accessing a fasse object eel related ta tha requested tease abject; and 
2S xarsdiap ihsileease object cell to tne setwaric nods wosreie tl® license abject cell groats access to 

at least ace data abject sell 

24, A network comprising; 

a user node ceoaled ta the network, therein tfes user node somp rises a user manager madufe and 
presides resists far data ebjeets and related Beensa objects m the oelwss-k; 
30 a content manager node cabled ta the network, therein tha content server -node receives requests 

for dais exacts ea rfts oetwosfc, retrieves requested data objects, sad responds to tie requests far data 
objects co ins network; and 
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s fansa manager mm coupled to the network, vsfheraw the csntsnt mm mite receives requests 
far related Wmm oipets no ths fjgtwofk, retrieves rented related Jseensg ejects, and responds to the 
requests for related license cblaats on taa oet&erk. 
25, A mtmtk comprising; 
8 a contest manager neds respsasive to rmpsst to previda a data eBjaet; 

a liaense manapr ends rasaassise to repast ie preslda a leeftsa object relate to at least ana data 
abject; aod 

s user nods providing access to rise data eblsct with the related license object, 
28, Tha netvtmrfc sf Claim 25, wharess lbs user «oii« as!ditboa% presiding; 
10 a ysar interface ta a m® far reqaestiag ane er mare data assents; 

s recast far selected data eajacts ff em the sontsot manager node: sea" 

s defermiasfsors «f whether the user node has access te a data ahjsei ami a Sssnse aipet. 

27. A system far managing data ehjaets camprfsfrtg; 

a tmtmi rnedale fat receiving rsqsjssts far data Ejects, retrieving tfes data otpds, arsd 
1 § transmittal ina r apssiad data ehjests; atul 

a tarns moaale for receiving repasts far lie&ssa objects related ta the data objects, retrieving the 
Is&ssss ehjaets related to the data objects, and transmitting fte reqaested license objects. 

28, A system tar. managing data objects comprising: 

means for managing tha data sheets; 
28 mesas far managing the tass objects; anil 

means for granting access to the dais abjssts based at laast apon a rotated fansa object 
20. A method of grarttisy access is 8 data object comprising; 

data abject sail retrieval rossas: 

data abject cell trassmissjort means; 
1§ License abjact sail retrieval means; 

license abject ceil irammission means; sad 

access granting means. 
3D, A data object sal comprising; 

a data control element; ana 1 
38 s data abject, 

31 , TlVa dots object eall of Claim 30 vs?har§ la the data aisject.is encrypted. 

32, The data object cell sf Ciaim 30 additionally csffspslsmg a sel header. 

33. The data aspect eel of Claim 3D adeltiana% aamerisina, at least site public certificate. 

34. The data abject call of Claim 3(1 additions!? eomarfeing at least one sipatare. 

8S 
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3§. A ilcenss object cell compffeing: 
a fease cartel e&menf? aod 
s %mm ofpet. 

38. Tbs license object sell of Claim 30 where la the tose sbject. is encrypted. 
§ 37. The ta$s object aa8 sf Claim 30 sd$tssii*$y comprisifig a sell tafer. 

38, The license ohjsst eel ef Ciaim 30 additionally c$tipris«tg st least aste pMe esslfkate. 
33. Tha dais sbfsst cell sf Claim 30 sditiaaally eemprrag si IsssS ens sipato. 
40. A database schema relating; 
am data; 

IS content date? end 

ferns dale, 

41 Tha database schema sf Claim 40 wtoefe ths user to comprises pnip data. 

42. The dstsnase schema of Claim 40 wise-sin the content data comprises: 

publisher data; 
IS pesleetiesi data; and 

article data, 

43. The database schema of Claim 40 wharaip the mitmt data sarrpises sahscdptlss data, 

44. Ths database ssfiema sf ZWm 40 wherein the eastern data ssmprises ping data. 

4Sv The database schema sf Clsssrs 48 arfosraia the license data esmprisss issued .tase.data., 
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